PT-2025-33289 · Dell · Dell Supportassist For Home Pcs+1

Published 2025-08-14 · Updated 2025-08-14 · CVE-2025-36613

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SupportAssist for Home PCs versions prior to 4.6.4 SupportAssist for Business PCs versions prior to 4.5.4

Description: SupportAssist for Home PCs and SupportAssist for Business PCs contain an Incorrect Privilege Assignment issue. A local attacker with low privileges could potentially exploit this issue, leading to unauthorized access.

Recommendations: Update SupportAssist for Home PCs to version 4.6.4 or later. Update SupportAssist for Business PCs to version 4.5.4 or later.

Fix

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-36613

Affected Products

Dell Supportassist For Business Pcs

Dell Supportassist For Home Pcs

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-36613 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36613 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000356690/dsa-2025-296-security-update-for-dell-supportassist-for-home-pcs-and-dell-supportassist-for-business-pcs-vulnerabilities · Vendor Advisory
• https://twitter.com/CVEnew/status/1956021897772093666 · Twitter Post