CVE-2019-3735: High severity dell supportassist vulnerability
Dell SupportAssist for Business PCs version 2.0 and Dell SupportAssist for Home PCs version 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, and 3.2.1 contain an Improper Privilege Management Vulnerability. A malicious local user can exploit this vulnerability by inheriting a system thread using a leaked thread handle to gain system privileges on the affected machine.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Dell SupportAssist vulnerability?
The vulnerability ID for this Dell SupportAssist vulnerability is CVE-2019-3735.
What is the severity of CVE-2019-3735?
The severity of CVE-2019-3735 is high with a score of 7.8.
Which versions of Dell SupportAssist are affected by CVE-2019-3735?
Dell SupportAssist for Business PCs version 2.0 and Dell SupportAssist for Home PCs versions 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, and 3.2.1 are affected by CVE-2019-3735.
What is the vulnerability in Dell SupportAssist for Business PCs?
The vulnerability in Dell SupportAssist for Business PCs is an Improper Privilege Management Vulnerability.
How can a malicious local user exploit CVE-2019-3735 in Dell SupportAssist?
A malicious local user can exploit CVE-2019-3735 by inheriting a system thread.