Privilege Escalation Vulnerability in Dell ControlVault Driver

CVE-2025-31361

What is CVE-2025-31361?

A privilege escalation vulnerability has been identified in the Dell ControlVault's WBDI Driver, specifically in the functionality associated with the WinBioControlUnit API call. If exploited, this flaw enables unauthorized users to escalate their privileges, allowing for potentially malicious actions on affected systems. Versions prior to 5.15.14.19 for Dell ControlVault3 and prior to 6.2.36.47 for Dell ControlVault3 Plus are susceptible to this vulnerability, making it critical for affected users to implement security updates promptly to mitigate risks.

References