CVE-2025-46685 HIGH

CVE-2025-46685

Vendor Dell

Product SupportAssist OS Recovery

Weakness CWE-378

Published January 13, 2026

Last update February 26, 2026

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Local

Attack complexity High

Privileges required Low

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Key dates

02Disclosure timeline

January 13, 2026 CVE published

February 26, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-46685 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/378.html

Related vulnerabilities

04Related CVE

CVE-2025-4953 Podman: build context bind mount CVE-2021-1428 Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities CVE-2021-25654 Avaya Aura Device Services Arbitrary Code Execution Vulnerability CVE-2021-1430 Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities CVE-2021-1426 Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities