Vulnerabilities (CVE)

Filtered by vendor Dell Subscribe

Filtered by product Xps 15 7590

Total 47 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2022-32491	1 Dell	580 Alienware Area 51m R1, Alienware Area 51m R1 Firmware, Alienware Area 51m R2 and 577 more	2024-02-28	N/A	7.8 HIGH
Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM.
CVE-2022-32489	1 Dell	580 Alienware Area 51m R1, Alienware Area 51m R1 Firmware, Alienware Area 51m R2 and 577 more	2024-02-28	N/A	7.8 HIGH
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2022-26861	1 Dell	798 Alienware M15 R6, Alienware M15 R6 Firmware, Chengming 3980 and 795 more	2024-02-28	N/A	7.8 HIGH
Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.
CVE-2021-36324	1 Dell	566 Alienware 13 R3, Alienware 13 R3 Firmware, Alienware 15 R3 and 563 more	2024-02-28	7.2 HIGH	6.7 MEDIUM
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-36323	1 Dell	566 Alienware 13 R3, Alienware 13 R3 Firmware, Alienware 15 R3 and 563 more	2024-02-28	7.2 HIGH	6.7 MEDIUM
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2021-36325	1 Dell	566 Alienware 13 R3, Alienware 13 R3 Firmware, Alienware 15 R3 and 563 more	2024-02-28	7.2 HIGH	6.7 MEDIUM
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
CVE-2020-5324	1 Dell	226 G3 15 3590, G3 15 3590 Firmware, G3 3579 and 223 more	2024-02-28	2.6 LOW	4.4 MEDIUM
Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is limited to the Dell Firmware Update Utility during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged malicious user could exploit this vulnerability by tricking an administrator into overwriting arbitrary files via a symlink attack. The vulnerability does not affect the actual binary payload that the update utility delivers.