Dell vulnerabilities
We track 854 vulnerabilities in Dell products across 60+ products. 853 are rated high or critical, and 3 have been exploited in real attacks. The most recent was published on November 13, 2026.
Latest Dell vulnerabilities
- 7.1 High severity
Dell BSAFE Micro Edition Suite: Out-of-bounds Read
Dell BSAFE Crypto-C Micro Edition, version 4.1.5, and Dell BSAFE Micro Edition Suite, versions 4.0 through 4.6.1 and version 5.0, contains an Out-of-bounds Read vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnera
- 7.8 High severity
Alienware Command Center (AWCC): Insufficient Isolation of Symbolic Constant Definitions
Dell Alienware Command Center, version 5.7.3.0 and prior, contains an improper access control vulnerability. A low privileged attacker could potentially exploit this vulnerability, leading to denial of service on the local system and information disclosure.
- 8.2 High severity
PowerSwitch Z9664F-ON BIOS: Out-of-bounds Write
Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some code in System Management Mode, le
- 8.2 High severity
PowerSwitch Z9664F-ON BIOS: Improper Initialization
Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary co
- 7.8 High severity
PowerScale OneFS: Execution with Unnecessary Privileges
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.2 contain an execution with unnecessary privileges vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to escalation of privileges.
- 7.5 High severity
PowerScale OneFS: Use of a Broken or Risky Cryptographic Algorithm
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.0 contain use of a broken or risky cryptographic algorithm vulnerability. An unprivileged network malicious attacker could potentially exploit this vulnerability, leading to data leaks.
- 9.8 Critical severity
Integrated Dell Remote Access Controller 9: Use of Insufficiently Random Values
iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a session hijacking vulnerability in IPMI. A remote attacker could potentially exploit this vulnerability, leading to arbitrary code execution on t
- 8.8 High severity
PowerProtect DD: Improper Neutralization of Special Elements used in an OS Command
Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an OS command injection vulnerability in an admin operation. A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution
- 8.8 High severity
PowerProtect DD: Out-of-bounds Write
Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
- 8.1 High severity
Secure Connect Gateway-Application: Improper Neutralization of Special Elements used in an SQL Command
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the ap
- 9.8 Critical severity
Secure Connect Gateway (SCG) Policy Manager: Permissive Cross-domain Security Policy with Untrusted Domains
SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious actions on the application
- 8.8 High severity
Secure Connect Gateway-Application: Improper Neutralization of Special Elements used in an SQL Command
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the a
- 8.2 High severity
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally…
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
- 8.2 High severity
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally…
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
- 8.2 High severity
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally…
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
- 7.8 High severity
Common Event Enabler: Deserialization of Untrusted Data
Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools. A local unauthenticated attacker could potentially exploit this vulnerability, leading to arbitrary code execution in the context of the logg
- 8.8 High severity
SmartFabric OS10 Software: Improper Authorization
Dell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an improper authorization vulnerability. A remote authenticated attacker could potentially exploit this vulnerability leading to escalation of privileges.
- 7.8 High severity
Dell OpenManage Server Administrator: Uncontrolled Search Path Element
Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privileged malicious user could potentially exploit this vulnerability and escalate their privilege to the adm
- 7.6 High severity
CPG BIOS: Missing Support for Integrity Check
Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.
- 8.1 High severity
PowerScale OneFS: Use of Hard-coded Credentials
Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure of network traffic and deni
- 7.8 High severity
realtek_high_definition_audio_driver: Improper Control of Generation of Code
An issue in the component RTKVHD64.sys of Realtek Semiconductor Corp Realtek(r) High Definition Audio Function Driver v6.0.9549.1 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
- 7.5 High severity
PowerScale OneFS: Use of a Broken or Risky Cryptographic Algorithm
Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains a use of a broken or risky cryptographic algorithm vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure.
- 7.5 High severity
PowerScale OneFS: Improper Handling of Unexpected Data Type
Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an improper handling of unexpected data type vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.
- 7.2 High severity
Data Manager Appliance Software (DMAS): Deserialization of Untrusted Data
Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability. A remote attacker with high privileges could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application.
- 9.1 Critical severity
iDRAC8: Insufficient Entropy
Implementations of IPMI Authenticated sessions does not provide enough randomness to protect from session hijacking, allowing an attacker to use either predictable IPMI Session ID or weak BMC Random Number to bypass security controls using spoofed IPMI packets
- 7.8 High severity
Dell OpenManage Enterprise: Insufficiently Protected Credentials
Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability. A local low privileged malicious user could potentially exploit this vulnerability to obtain credentials leading to unauthorized access with elevat
- 7.8 High severity
Dell Repository Manager (DRM): Improper Limitation of a Pathname to a Restricted Directory
Dell Repository Manager, versions prior to 3.4.5, contains a Path Traversal vulnerability in API module. A local attacker with low privileges could potentially exploit this vulnerability to gain unauthorized write access to the files stored on the server files
- 7.8 High severity
Alienware Command Center (AWCC): Uncontrolled Search Path Element
Dell Alienware Command Center, versions prior to 6.2.7.0, contain an uncontrolled search path element vulnerability. A local malicious user could potentially inject malicious files in the file search path, leading to system compromise.
- 7.8 High severity
PowerEdge Platform: Improper Privilege Management
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.
- 7.5 High severity
Dell OpenManage Enterprise: Improper Limitation of a Pathname to a Restricted Directory
Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, to gain unauthorized access to the files stored on the server filesystem, with the privilege
- 7.5 High severity
PowerScale OneFS: Use of a Broken or Risky Cryptographic Algorithm
Dell PowerScale OneFS, versions 8.2.2.x through 9.5.0.x contains a use of a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure.
- 7.8 High severity
PowerScale OneFS: Cleartext Transmission of Sensitive Information
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains a cleartext transmission of sensitive information vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to escalation of privileges.
- 8.8 High severity
Virtual Appliance (vApp) Manager: Improper Neutralization of Special Elements used in a Command
Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could potentially exploit this vulnerability leading to an execution of an inserted command. Dell recommends customers to upgrade at the earliest opp
- 7.5 High severity
Dell PowerScale OneFS, versions 9.5.0.x through 9.7.0.x, contain an insufficient session…
Dell PowerScale OneFS, versions 9.5.0.x through 9.7.0.x, contain an insufficient session expiration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.
- 8.8 High severity
Virtual Appliance (vApp) Manager: Improper Neutralization of Special Elements used in a Command
Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could potentially exploit this vulnerability leading to an execution of an inserted command. Dell recommends customers to upgrade at the earliest opp
- 7.8 High severity
Grab for Windows: Incorrect Default Permissions
Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to applicati
- 7.5 High severity
PowerScale OneFS: Covert Timing Channel
Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.
- 8.8 High severity
PowerEdge BIOS Intel 16G: Out-of-bounds Write
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM.
- 8.4 High severity
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication…
Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.
- 9.1 Critical severity
PowerScale OneFS: Use of a Broken or Risky Cryptographic Algorithm
Dell PowerScale OneFS 8.2.x through 9.6.0.x contains a use of a broken or risky cryptographic algorithm vulnerability. A remote unprivileged attacker could potentially exploit this vulnerability, leading to compromise of confidentiality and integrity of sensit