CVE-2021-36286

Dell SupportAssist Client Consumer versions 3.9.13.0 and earlier are affected by an arbitrary file deletion vulnerability tied to NTFS symbolic links and junction points. The clean-files function treats junction points as normal folders, allowing non-privileged users to cause deletion of files ac...

CVE-2020-5357

CVE-2020-5357 :Dell Dock Firmware Update Utilities for Dell Client Consumer and Commercial docking stations contain an Arbitrary File Overwrite vulnerability. The flaw is exploitable during the administrator execution window via a symlink attack by a locally authenticated, low-privileged user, en...