CVE-2025-36612: Dell Supportassist For Business Pcs

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

SupportAssist for Business PCs, version(s) 4.5.3 and prior, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.

Affected products

• Dell Supportassist For Business Pcs: before 4.9.0 (fixed in 4.9.0)

Published 2025-08-14. Last modified 2026-06-17.