Wyse Proprietary OS (Modern ThinOS) vulnerabilities

6 known vulnerabilities in Wyse Proprietary OS (Modern ThinOS) from Dell. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Wyse Proprietary OS (Modern ThinOS): Incorrect Permission Assignment for Critical Resource

  CVE-2025-27688Mar 18, 2025Dell

  Dell ThinOS 2408 and prior, contains an improper permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

• 7.8 High severity

  Wyse Proprietary OS (Modern ThinOS): Improper Neutralization of Special Elements used in a Command

  CVE-2025-26331Mar 7, 2025Dell

  Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execu

• 8.4 High severity

  Wyse Proprietary OS (Modern ThinOS): Improper Neutralization of Special Elements used in a Command

  CVE-2024-53290Dec 11, 2024Dell

  Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution

• 7.0 High severity

  Wyse Proprietary OS (Modern ThinOS): Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2024-53289Dec 11, 2024Dell

  Dell ThinOS version 2408 contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

• 7.1 High severity

  Wyse Proprietary OS (Modern ThinOS): Incorrect Authorization

  CVE-2024-42423Sep 10, 2024Dell

  Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existi

• 7.6 High severity

  Wyse Proprietary OS (Modern ThinOS): Improper Neutralization of Special Elements used in a Command

  CVE-2024-42427Sep 10, 2024DellEPSS 1.07%

  Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Elevati