CVE-2025-46685
High · 7.5CVSS
7.5
EPSS
0.1%
Published
Jan 13, 2026
CISA due date
—
The record
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-46388 osquery is a SQL powered operating system instrumentation, monitoring, and analytics… CWE-378
- CVE-2026-4137 In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in… CWE-378
- GHSA-9q8j-chc7-wpgp Duplicate Advisory: OpenClaw session transcript files were created without forced… CWE-378
- CVE-2026-33572 OpenClaw before 2026.2.17 creates session transcript JSONL files with overly broad… CWE-378
- CVE-2026-4822 A vulnerability was detected in Enter Software Iperius Backup up to 8.7.3. CWE-378
- CVE-2026-2817 Use of insecure directory in Spring Data Geode snapshot import extracts archives into… CWE-378
- CVE-2025-46684 Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of… CWE-378
- CVE-2025-34352 JumpCloud Remote Assist for Windows versions prior to 0.317.0 include an uninstaller that… CWE-378