CVE-2024-53289

CVE-2024-53289 affects Dell ThinOS version 2408, describing a Time-of-check Time-of-use (TOCTOU) race condition that could allow a low-privileged, locally authenticated attacker to achieve Elevation of Privileges. Connected sources corroborate Dell ThinOS 2408 as the affected release and frame th...

CVE-2024-53290

Dell ThinOS 2408 is affected by a local, unauthenticated Command Injection due to improper neutralization of special elements. The CVE-2024-53290 entry documents allow command execution with high impact (C/H, I/H, A/H) and a local attack vector; no exploitation or patch details are confirmed in t...

CVE-2025-32752

Dell ThinOS 2502 and earlier versions are affected by a Cleartext Storage of Sensitive Information vulnerability. The root cause is storing sensitive data in clear text, enabling information disclosure when a high-privileged attacker gains physical access. Practical impact is information disclosu...

CVE-2025-27688

Dell ThinOS 2408 and earlier contain an improper permissions vulnerability that can lead to local elevation of privilege by a low-privileged attacker with local access. The issue arises from improper privilege settings in the OS (as described across multiple sources). Affected product: Dell ThinO...

CVE-2025-26331

Dell ThinOS CVE-2025-26331 affects ThinOS 2411 and earlier. The vulnerability is an Improper Neutralization of Special Elements used in a Command (Command Injection) issue that could allow a low-privilege, local attacker to execute arbitrary code. Reported metrics indicate CVSSv3.1 base score 7.8...

CVE-2026-40715

Summary: Dell ThinOS 10 (pre-2602_10.0765) contains an Improper Access Control vulnerability that enables privilege escalation for a low-privilege, locally authenticated attacker. Affected component: ThinOS 10; root cause: improper access control. Impact: potential privilege escalation. Exploitat...

CVE-2026-40713

CVE-2026-40713 concerns Dell ThinOS 10, specifically versions prior to ThinOS10_2602_10.0765, with an improper access control vulnerability. The vulnerability allows an unauthenticated attacker who has physical access to potentially cause information exposure. The available documents do not provi...

CVE-2026-23862

CVE-2026-23862 affects Dell ThinOS 10 versions prior to ThinOS 2602_10.0573. The vulnerability is an Improper Neutralization of Special Elements in a Command (command injection) that could be exploited by a low-privileged local attacker to achieve Elevation of Privileges. The impact is high for c...

CVE-2025-43728

Dell ThinOS 10 prior to 2508_10.0127 contains a Protection Mechanism Failure vulnerability (CVE-2025-43728). An unauthenticated attacker with remote access could exploit it to bypass the protection mechanism, with impact described as high confidentiality, integrity, and availability. Remediation ...

CVE-2025-43882

Dell ThinOS 10 is affected by CVE-2025-43882. Prior to version 2508_10.0127, an unverified ownership condition could allow a local, low-privileged attacker to achieve Unauthorized Access. The issue is documented across multiple sources (including Red Hat and PT Security references) with a CVSSv3....

CVE-2025-43729

Dell ThinOS 10 is affected by an Elevation of Privileges vulnerability due to Incorrect Permission Assignment for a Critical Resource. Affected versions are prior to 2508_10.0127. Local, low-privilege attackers could exploit this to gain unauthorized access. The issue is mitigated by upgrading De...

CVE-2025-43730

Dell ThinOS 10 is affected by an Improper Neutralization of Argument Delimiters in a Command (Argument Injection) vulnerability. Affected: Dell ThinOS 10 before 2508_10.0127. Impact per sources: local elevation of privileges and information disclosure for a local unauthenticated user. Root cause:...