Vulnerability Database

300,214

Total vulnerabilities in the database

CVE-2025-38746

Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure.

  • Published: Aug 6, 2025
  • Updated: Aug 19, 2025
  • CVE: CVE-2025-38746
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 2.4
  • AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWEs:

Software From Fixed in
dell / supportassist_os_recovery - 5.5.14.0