CVE-2023-48670

Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileged authenticated attacker may potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with elevated privileges.

Score

CVSS 3.1 7.8 High

Status

Modified - security_alert@emc.com

Published

2023-12-22

Last modified

2026-02-25

Weaknesses

CWE-426

Affected products

• Supportassist Client Consumer (Dell)
• Supportassist For Home Pcs (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000220677/dsa-2023-468-security-update-for-dell-supportassist-for-home-pcs-ins…