7.1
High
CVE-2024-52535 Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and…
Description
Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability, gaining privileges escalation, leading to arbitrary deletion of files and folders from the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SupportAssist for Home PCs 4.6 | earliest → < 4.6.2 | 4.6.2 |
| SupportAssist for Business PCs 4.5 | earliest → < 4.5.1 | 4.5.1 |
Other CVEs of SupportAssist for Home PCs
The 6 CVEs of SupportAssist for Home PCs →
CVE-2025-43991
SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contain…
6.3
Medium
CVE-2025-36613
SupportAssist for Home PCs versions 4.6.3 and prior and SupportAssist for Business PCs versions 4.5.3 and prior,…
2.8
Low
CVE-2025-38738
SupportAssist for Home PCs Installer exe version(s) 4.8.2.29006 and prior, contain(s) an Incorrect Privilege…
6.7
Medium
CVE-2024-38305
Dell SupportAssist for Home PCs Installer exe version 4.0.3 contains a privilege escalation vulnerability in the…
7.3
High