Dell Supportassist OS Recovery vulnerabilities

7 CVEs affecting Dell Supportassist OS Recovery, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-46685, published 2026-01-13.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-26865, published 2022-05-26. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by…
• CVE-2025-38746, published 2025-08-06. Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. An unauthenticated attacker with physical access…
• CVE-2025-22480, published 2025-02-13. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability,…
• CVE-2025-38747, published 2025-08-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability. A local authenticated attacker could potentially exploit this…
• CVE-2025-46684, published 2026-01-13. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially…
• CVE-2025-46602, published 2025-10-27. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with…
• CVE-2025-46685, published 2026-01-13. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially…