Dell CONTROLVAULT3 vulnerabilities

13 CVEs affecting Dell CONTROLVAULT3, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36553, published 2025-11-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-24922, published 2025-06-13. High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability exists in the securebio_identify functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially…
CVE-2025-25215, published 2025-06-13. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. An arbitrary free vulnerability exists in the cv_close functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API…
CVE-2025-24919, published 2025-06-13. High severity, CVSS 8.1. EPSS: 2.6% chance of exploitation in the next 30 days. A deserialization of untrusted input vulnerability exists in the cvhDecapsulateCmd functionality of Dell ControlVault3 prior to 5.15.10.14 and ControlVault3 Plus prior to 6.2.26.36. A specially…
CVE-2025-25050, published 2025-06-13. High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days. An out-of-bounds write vulnerability exists in the cv_upgrade_sensor_firmware functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault 3 Plus prior to 6.2.26.36. A specially…
CVE-2025-24311, published 2025-06-13. High severity, CVSS 8.4. EPSS: 2% chance of exploitation in the next 30 days. An out-of-bounds read vulnerability exists in the cv_send_blockdata functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted…
CVE-2025-32089, published 2025-11-17. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in the CvManager_SBI functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault…
CVE-2025-36553, published 2025-11-17. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in the CvManager functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API…
CVE-2025-31649, published 2025-11-17. High severity, CVSS 8.7. EPSS: 0.2% chance of exploitation in the next 30 days. A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted…
CVE-2025-31361, published 2025-11-17. High severity, CVSS 8.7. EPSS: 0.2% chance of exploitation in the next 30 days. A privilege escalation vulnerability exists in the ControlVault WBDI Driver WBIO_USH_ADD_RECORD functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47.…
CVE-2025-36463, published 2025-11-17. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3…

Latest

CVE-2025-36462, published 2025-11-17. High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days. Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3…
CVE-2025-36461, published 2025-11-17. High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days. Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3…
CVE-2025-36460, published 2025-11-17. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3…