Incorrect Privilege Assignment Vulnerability in Dell SupportAssist
CVE-2025-38738

6.7MEDIUM

Key Information:

Vendor

Dell
Status
Supportassist For Home Pcs
Vendor
CVE Published:
14 August 2025

What is CVE-2025-38738?

Dell SupportAssist for Home PCs Installer versions earlier than 4.8.2.29006 are impacted by an incorrect privilege assignment vulnerability. This flaw allows a low privileged attacker with local access to exploit the installer, potentially leading to an elevation of privileges. The exploitation of this vulnerability could compromise system integrity and provide unauthorized access to sensitive data.

Affected Version(s)

SupportAssist for Home PCs < 4.8.2.38851

References

https://www.dell.com/support/kbdoc/en-us/000356690/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell would like to thank Ouallaout Noureddine for reporting this issue.
.