Dell Supportassist For Business Pcs vulnerabilities

19 CVEs affecting Dell Supportassist For Business Pcs, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-43991, published 2025-10-13.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-12280, published 2019-06-25. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.
• CVE-2022-29095, published 2022-06-10. Critical severity, CVSS 9.6. EPSS: 1.2% chance of exploitation in the next 30 days. Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client Commercial versions (3.1.1 and prior) contain a cross-site scripting vulnerability. A remote…
• CVE-2024-52535, published 2024-12-25. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) attack vulnerability in the software…
• CVE-2022-34389, published 2023-02-11. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component. An unauthenticated attacker could potentially exploit this vulnerability and impersonate a legitimate…
• CVE-2022-29092, published 2022-06-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell SupportAssist Client Consumer versions (3.11.0 and versions prior) and Dell SupportAssist Client Commercial versions (3.2.0 and versions prior) contain a privilege escalation vulnerability. A…
• CVE-2021-21518, published 2021-03-12. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell SupportAssist Client for Consumer PCs versions 3.7.x, 3.6.x, 3.4.x, 3.3.x, Dell SupportAssist Client for Business PCs versions 2.0.x, 2.1.x, 2.2.x, and Dell SupportAssist Client ProManage 1.x…
• CVE-2020-5316, published 2021-07-22. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Dell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell SupportAssist for Home PCs version 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1, 2.2.2,…
• CVE-2019-3735, published 2019-06-20. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Dell SupportAssist for Business PCs version 2.0 and Dell SupportAssist for Home PCs version 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, and 3.2.1 contain an Improper Privilege Management…
• CVE-2022-29094, published 2022-06-10. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion/overwrite…
• CVE-2022-29093, published 2022-06-10. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an arbitrary file deletion vulnerability.…

Latest

• CVE-2025-43991, published 2025-10-13. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain an UNIX Symbolic Link (Symlink) following vulnerability. A low privileged…
• CVE-2025-36613, published 2025-08-14. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. SupportAssist for Home PCs versions 4.6.3 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker…
• CVE-2025-36612, published 2025-08-14. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. SupportAssist for Business PCs, version(s) 4.5.3 and prior, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this…
• CVE-2023-44283, published 2024-02-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated…
• CVE-2022-34388, published 2023-02-11. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SupportAssist for Home PCs (version 3.11.4 and prior) and  SupportAssist for Business PCs (version 3.2.0 and prior) contain information disclosure vulnerability. A local malicious user with low…
• CVE-2022-34387, published 2023-02-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privilege escalation vulnerability. A local authenticated…
• CVE-2022-34386, published 2023-02-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability. An authenticated non-admin user…
• CVE-2022-34385, published 2023-02-11. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. SupportAssist for Home PCs (version 3.11.4 and prior) and  SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability. An authenticated non-admin user…