CVE-2023-28063

CVE-2023-28063 affects Dell BIOS. Root cause: a signed-to-unsigned conversion error. Local authenticated admin can exploit to cause a denial of service. Dell-DSA-2023-176 and Dell KB 000214780 document the fix; Nessus plugin notes a patch is available. If exploited, impact is DoS on the affected ...

CVE-2024-52541

CVE-2024-52541 affects Dell Client Platform BIOS. The vulnerability is a weak authentication flaw that could allow a high-privilege attacker with local access to achieve Elevation of Privileges. The connected sources confirm the issue but do not provide public exploit details or concrete remediat...

CVE-2025-29988

CVE-2025-29988 affects Dell Client Platform BIOS. Detailed sources describe a Stack-based Buffer Overflow vulnerability in the BIOS, exploitable by a high-privilege local attacker to achieve arbitrary code execution. The root cause is an input handling/application boundary error, with confirmatio...

CVE-2023-48674

CVE-2023-48674 affects Dell Platform BIOS. Described as an improper NULL termination vulnerability that could allow a high-privilege user with network access to send malicious data to the device, potentially causing some services to cease functioning (DoS). Documented impact includes availability...

CVE-2022-32482

CVE-2022-32482 : Dell BIOS contains an improper input validation vulnerability that allows a local authenticated attacker with admin privileges to potentially modify a UEFI variable. Affected component: Dell BIOS; root cause: input validation flaw. Exploitation details are not provided in the ava...

CVE-2023-28075

Dell BIOS TOCTOU vulnerability (CVE-2023-28075) allows a locally authenticated user with physical access to trigger a specifically timed DMA operation during an SMI to gain arbitrary code execution. Affected component is the Dell BIOS; root cause is a Time‑of‑check Time‑of‑use flaw enabling TOCTO...

CVE-2022-46752

Dell BIOS contains an improper authorization vulnerability. An unauthenticated physical attacker may cause a denial of service. Affected: Dell BIOS (firmware); root cause is improper authorization management. Impact: availability loss (CVSS v3.1: AV=P/AC=L/PR=N/UI=N/S=U/C=N/I=N/A=H; base score 4....

CVE-2024-22448

CVE-2024-22448 concerns Dell BIOS: an Out-of-Bounds Write vulnerability in Dell BIOS, exploitable by a local, authenticated attacker with admin privileges, causing denial of service. Affected software/tooling is the Dell BIOS on Dell systems; the root cause is an out-of-bounds write in the BIOS c...

CVE-2024-0158

CVE-2024-0158 relates to Dell BIOS, where an improper input validation flaw could let a locally authenticated administrator modify a UEFI variable, causing denial of service and privilege escalation. Affected software is the Dell BIOS (details on exact versions are not consistently specified acro...

CVE-2023-32453

Dell BIOS firmware on Dell systems contains an improper authentication vulnerability. A malicious user with physical access can potentially modify a security-critical UEFI variable without BIOS administrator knowledge, due to an authentication weakness in the BIOS/UEFI flow. CVSS details in the p...

CVE-2023-43078

Dell Dock Firmware and Dell Client Platform are affected by CVE-2023-43078 due to an Improper Link Resolution vulnerability during installation, which can lead to arbitrary folder deletion and potential Privilege Escalation or Denial of Service. Affected components include the Dell Dock Firmware ...