Dell Supportassist For Home Pcs vulnerabilities

26 CVEs affecting Dell Supportassist For Home Pcs, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-43991, published 2025-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-12280, published 2019-06-25. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.
CVE-2022-29095, published 2022-06-10. Critical severity, CVSS 9.6. EPSS: 1.2% chance of exploitation in the next 30 days. Dell SupportAssist Client Consumer versions (3.10.4 and prior) and Dell SupportAssist Client Commercial versions (3.1.1 and prior) contain a cross-site scripting vulnerability. A remote…
CVE-2024-52535, published 2024-12-25. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) attack vulnerability in the software…
CVE-2022-34366, published 2023-02-10. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Dell SupportAssist for Home PCs (version 3.11.2 and prior) contain Overly Permissive Cross-domain Whitelist vulnerability. An authenticated non-admin user could potentially exploit the issue and…
CVE-2021-36297, published 2021-09-28. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a separate…
CVE-2022-34389, published 2023-02-11. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component. An unauthenticated attacker could potentially exploit this vulnerability and impersonate a legitimate…
CVE-2022-29092, published 2022-06-10. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell SupportAssist Client Consumer versions (3.11.0 and versions prior) and Dell SupportAssist Client Commercial versions (3.2.0 and versions prior) contain a privilege escalation vulnerability. A…
CVE-2021-21518, published 2021-03-12. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell SupportAssist Client for Consumer PCs versions 3.7.x, 3.6.x, 3.4.x, 3.3.x, Dell SupportAssist Client for Business PCs versions 2.0.x, 2.1.x, 2.2.x, and Dell SupportAssist Client ProManage 1.x…
CVE-2024-38305, published 2024-08-21. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. Dell SupportAssist for Home PCs Installer exe version 4.0.3 contains a privilege escalation vulnerability in the installer. A local low-privileged authenticated attacker could potentially exploit…
CVE-2023-39249, published 2024-02-14. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin users to gain temporary privilege within the…

Latest

CVE-2025-43991, published 2025-10-13. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain an UNIX Symbolic Link (Symlink) following vulnerability. A low privileged…
CVE-2025-38738, published 2025-08-14. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. SupportAssist for Home PCs Installer exe version(s) 4.8.2.29006 and prior, contain(s) an Incorrect Privilege Assignment vulnerability in the Installer. A low privileged attacker with local access…
CVE-2025-36613, published 2025-08-14. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. SupportAssist for Home PCs versions 4.6.3 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker…
CVE-2023-44283, published 2024-02-14. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated…
CVE-2023-25535, published 2024-02-14. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation (LPE). This…
CVE-2023-48670, published 2023-12-22. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileged authenticated attacker may potentially exploit…
CVE-2022-34392, published 2023-02-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability. An authenticated non-admin user can be able to obtain the refresh token and that…