Dell Supportassist Os Recovery — known CVE vulnerabilities

Every CVE whose affected-product data names Dell Supportassist Os Recovery, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2025-38747 — CVSS 7.8 (high): Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability. A…
• CVE-2025-46685 — CVSS 7.5 (high): Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A…
• CVE-2025-22480 — CVSS 7.0 (high): Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with…
• CVE-2022-26865 — CVSS 6.8 (medium): Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with…
• CVE-2025-46684 — CVSS 6.6 (medium): Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A…
• CVE-2025-46602 — CVSS 4.4 (medium): Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File…
• CVE-2025-38746 — CVSS 3.5 (low): Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthorized Actor…