CVE-2023-28063

CVE-2023-28063 affects Dell BIOS. Root cause: a signed-to-unsigned conversion error. Local authenticated admin can exploit to cause a denial of service. Dell-DSA-2023-176 and Dell KB 000214780 document the fix; Nessus plugin notes a patch is available. If exploited, impact is DoS on the affected ...

CVE-2024-52541

CVE-2024-52541 affects Dell Client Platform BIOS. The vulnerability is a weak authentication flaw that could allow a high-privilege attacker with local access to achieve Elevation of Privileges. The connected sources confirm the issue but do not provide public exploit details or concrete remediat...

CVE-2023-48674

CVE-2023-48674 affects Dell Platform BIOS. Described as an improper NULL termination vulnerability that could allow a high-privilege user with network access to send malicious data to the device, potentially causing some services to cease functioning (DoS). Documented impact includes availability...

CVE-2025-29988

CVE-2025-29988 affects Dell Client Platform BIOS. Detailed sources describe a Stack-based Buffer Overflow vulnerability in the BIOS, exploitable by a high-privilege local attacker to achieve arbitrary code execution. The root cause is an input handling/application boundary error, with confirmatio...

CVE-2022-32482

CVE-2022-32482 : Dell BIOS contains an improper input validation vulnerability that allows a local authenticated attacker with admin privileges to potentially modify a UEFI variable. Affected component: Dell BIOS; root cause: input validation flaw. Exploitation details are not provided in the ava...

CVE-2022-46752

Dell BIOS contains an improper authorization vulnerability. An unauthenticated physical attacker may cause a denial of service. Affected: Dell BIOS (firmware); root cause is improper authorization management. Impact: availability loss (CVSS v3.1: AV=P/AC=L/PR=N/UI=N/S=U/C=N/I=N/A=H; base score 4....

CVE-2023-28064

Dell BIOS contains an out-of-bounds write vulnerability that may be exploited by an unauthenticated, physical attacker to cause a denial of service. Affected: Dell BIOS on Dell systems. Root cause: out-of-bounds write in BIOS code. Impact: denial of service (no confidentiality/integrity impact st...

CVE-2024-22448

CVE-2024-22448 concerns Dell BIOS: an Out-of-Bounds Write vulnerability in Dell BIOS, exploitable by a local, authenticated attacker with admin privileges, causing denial of service. Affected software/tooling is the Dell BIOS on Dell systems; the root cause is an out-of-bounds write in the BIOS c...

CVE-2023-28036

Dell BIOS contains an improper input validation vulnerability that can be exploited by a local authenticated attacker with administrator privileges to modify a UEFI variable. Affected: Dell BIOS on Dell systems. Root cause: improper input validation. Impact: potential modification of UEFI variabl...

CVE-2023-28050

The vulnerability CVE-2023-28050 affects Dell BIOS (embedded firmware) where improper input validation could allow a local authenticated attacker with administrator privileges to modify a UEFI variable. Root cause: faulty input validation in Dell BIOS code. Impact: potential integrity/availabilit...

CVE-2024-0158

CVE-2024-0158 relates to Dell BIOS, where an improper input validation flaw could let a locally authenticated administrator modify a UEFI variable, causing denial of service and privilege escalation. Affected software is the Dell BIOS (details on exact versions are not consistently specified acro...

CVE-2023-28034

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated attacker with administrator privileges to modify a UEFI variable. Affected component is the Dell BIOS/Uefi interface on Dell systems. Root cause: improper input validation in the BIOS that handles...

CVE-2023-28058

CVE-2023-28058 describes an improper input validation vulnerability in Dell BIOS. A local authenticated attacker with administrator privileges may exploit this to modify a UEFI variable. Affected component: Dell BIOS; root cause: input validation flaw in BIOS handling of UEFI variables. Impacts r...

CVE-2023-28060

Dell BIOS contains an improper input validation vulnerability (CVE-2023-28060). A local authenticated attacker with administrator privileges may exploit this to modify a UEFI variable. Affected component is BIOS firmware; root cause is input validation failure. Impact is elevation/modification of...

CVE-2023-28031

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated administrator to modify a UEFI variable. Affected component is Dell BIOS (embedded firmware on Dell systems); root cause is input validation failure when handling UEFI variables. The vulnerability...

CVE-2023-25938

CVE-2023-25938 describes an improper input validation vulnerability in Dell BIOS that can allow a local, authenticated attacker with administrator privileges to modify a UEFI variable. The issue is tied to the BIOS/firmware handling of input and does not include explicit exploit details in the pr...

CVE-2023-28033

CVSS context and impact : CVE-2023-28033 affects Dell BIOS (UEFI support code) through an improper input validation vulnerability. A local authenticated user with administrator privileges can potentially exploit this to modify a UEFI variable (impact: confidentiality, integrity, availability rate...

CVE-2023-25937

Dell BIOS contains an improper input validation vulnerability that could allow a local, authenticated administrator to modify a UEFI variable. The CVE-2023-25937 entry is supported by multiple sources (NVD, CVE list, CNNVD, PRION, etc.). Reported impact includes potential changes to UEFI state wi...

CVE-2023-28026

CVE-2023-28026 affects Dell BIOS and stems from improper input validation. A local authenticated attacker with administrator privileges could potentially modify a UEFI variable via this vulnerability. Documents indicate Dell released a BIOS security update addressing multiple improper input valid...

CVE-2023-28027

Dell BIOS on Dell systems contains an improper input validation vulnerability that enables a local authenticated administrator to modify a UEFI variable. The root cause is insufficient validation in the BIOS input handling, allowing manipulation of UEFI state. The impact, as stated, includes pote...

CVE-2023-28039

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated user with administrator privileges to modify a UEFI variable. The issue affects Dell BIOS firmware and is described across multiple sources (e.g., Dell KB article DSA-2023-099). No exploitation de...

CVE-2023-28059

Dell BIOS contains an improper input validation vulnerability that can allow a local authenticated administrator to modify a UEFI variable. Affected component: Dell BIOS (embedded BIOS on Dell motherboards). Root cause: improper input validation. Impact: potential unauthorized modification of UEF...

CVE-2023-43078

Dell Dock Firmware and Dell Client Platform are affected by CVE-2023-43078 due to an Improper Link Resolution vulnerability during installation, which can lead to arbitrary folder deletion and potential Privilege Escalation or Denial of Service. Affected components include the Dell Dock Firmware ...

CVE-2023-28028

Dell BIOS contains an improper input validation vulnerability (CVE-2023-28028). A local authenticated attacker with administrator privileges can potentially exploit this to modify a UEFI variable. Connected sources indicate affected firmware and that Dell issued a security update (DSA-2023-099) a...

CVE-2023-28044

Dell BIOS has an improper input-validation vulnerability. A local authenticated attacker with administrator privileges can potentially modify a UEFI variable due to the fault in input validation. Affected component is Dell BIOS firmware on Dell systems; the root cause is input validation failure....

CVE-2023-28052

CVE-2023-28052 describes an improper input validation vulnerability in Dell BIOS. A local authenticated attacker with administrator privileges can potentially modify a UEFI variable, impacting system integrity and availability. The affected component is Dell BIOS (UEFI/firmware) with root cause s...

CVE-2023-28029

CVE-2023-28029 is tied to Dell BIOS and is described as an improper input-validation vulnerability that permits a local authenticated attacker with administrator privileges to modify a UEFI variable. The affected component is Dell BIOS firmware on Dell systems; root cause centers on input validat...

CVE-2023-28035

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated administrator to modify a UEFI variable. Affected: Dell BIOS. Root cause: improper input validation. Impact: potential confidentiality, integrity, and limited availability effects per CVSS; local,...

CVE-2023-28042

Dell BIOS contains an improper input validation vulnerability that could allow a local authenticated administrator to modify a UEFI variable. Affected component is Dell BIOS firmware; root cause is input validation failure. Impact is potential compromise of UEFI variable integrity with high confi...

CVE-2023-28054

CVE-2023-28054 describes an improper input validation vulnerability in Dell BIOS. A local authenticated attacker with administrator privileges can potentially exploit this to modify a UEFI variable. The affected component is Dell BIOS firmware; root cause is input validation failure. Impact, as s...

CVE-2023-28030

Dell BIOS (on affected systems) contains an improper input validation vulnerability that can be exploited by a local authenticated attacker with administrator privileges to modify a UEFI variable. The issue is driven by input validation problems in the BIOS code. Impact is described as high for i...

CVE-2023-28056

Dell BIOS exposes an improper input validation vulnerability that can be exploited by a local authenticated administrator to modify a UEFI variable. The issue is documented across multiple sources (e.g., Dell security advisory for BIOS updates addressing improper input validation). Affected compo...

CVE-2023-28061

Dell BIOS is affected by an improper input validation vulnerability that allows a local authenticated administrator to modify a UEFI variable. Affected component: Dell BIOS (BIOS firmware on Dell systems). Root cause: improper input validation enabling unauthorized modification of UEFI variables....

CVE-2023-25936

Dell BIOS contains an improper input validation vulnerability. A local authenticated user with administrator privileges may exploit this to modify a UEFI variable. Affected component: Dell BIOS; impact includes potential integrity/availability impact through UEFI variable modification. Root cause...

CVE-2023-28041

CVE-2023-28041 concerns Dell BIOS, where an improper input validation weakness could be abused by a local authenticated administrator to modify a UEFI variable. The vulnerability affects the BIOS and could impact confidentiality, integrity, and availability. Exploitation status is not detailed in...

CVE-2023-28040

CVE-2023-28040 affects Dell BIOS and describes an improper input validation vulnerability in the BIOS firmware that could allow a local authenticated attacker with administrator privileges to modify a UEFI variable. The root cause is input validation failure when handling UEFI variable actions. I...

CVE-2023-28032

CVE-2023-28032 concerns Dell BIOS with an improper input validation vulnerability. The issue allows a local, authenticated attacker with administrator privileges to potentially modify a UEFI variable by abusing input handling in the BIOS firmware. Affected component is Dell BIOS; the root cause i...