CVE-2025-46602
Medium · 5.5CVSS
5.5
EPSS
0.1%
Published
Oct 27, 2025
CISA due date
—
The record
Dell SupportAssist OS Recovery, versions prior to 5.5.15.0, contain an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|