High severity7.8NVD Advisory· Published Jun 12, 2024· Updated Jun 17, 2026
CVE-2024-28964
CVE-2024-28964
Description
Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools. A local unauthenticated attacker could potentially exploit this vulnerability, leading to arbitrary code execution in the context of the logged in user. Exploitation of this issue requires a victim to open a malicious file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=8.9.10.0+ 2 more
- (no CPE)range: <=8.9.10.0
- cpe:2.3:a:dell:common_event_enabler:*:*:*:*:*:windows:*:*range: <=8.9.10.0
- (no CPE)range: N/A
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.