CVE-2025-46637

HighCVSS 7.3

Published: 09/12/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A local malicious user could potentially exploit this vulnerability, leading to Elevation of privileges.

Risk Assessment

A local attacker could exploit this vulnerability to gain elevated privileges, potentially leading to unauthorized access to protected data and the system.

Recommendation

Update Dell Encryption to version 11.12.1 or later and restrict access to systems running the software.

Other vulnerabilities in Dell Encryption

CVE-2025-46636Medium
Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS