Medium severity6.7NVD Advisory· Published Aug 14, 2025· Updated Jun 17, 2026

CVE-2025-36612

Description

SupportAssist for Business PCs, version(s) 4.5.3 and prior, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/Supportassist For Business Pcs2 versions
cpe:2.3:a:dell:supportassist_for_business_pcs:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dell:supportassist_for_business_pcs:*:*:*:*:*:*:*:*range: <4.9.0
- (no CPE)range: <=4.5.3
Dell/Supportassist For Home Pcscpe-rescue
Range: N/A

Patches

Vulnerability mechanics

References

www.dell.com/support/kbdoc/en-us/000356690/dsa-2025-296-security-update-for-dell-supportassist-for-home-pcs-and-dell-supportassist-for-business-pcs-vulnerabilitiesnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000