Vendor
Dell
3,248 known vulnerabilities in products by Dell, 7 of them actively exploited (CISA KEV).
Key figures
3,248
Vulnerabilities
7
Actively exploited (KEV)
0
Used by ransomware
310
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2025-24813 | Apache Tomcat Path Equivalence Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEV | 7.5 | |
| Critical | CVE-2026-22769 | Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2025-6558 | Google Chromium ANGLE and GPU Improper Input Validation Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2025-27363 | FreeType Out-of-Bounds Write Vulnerability In CISA KEV | 8.1 | |
| Critical | CVE-2021-21551 | Dell dbutil Driver Insufficient Access Control Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2020-11899 | Treck TCP/IP stack Out-of-Bounds Read Vulnerability In CISA KEV | 5.4 | |
| Critical | CVE-2022-38126 | Dell ECS: security vulnerability | — | |
| Critical | CVE-2022-3542 | Dell ECS: security vulnerability | — | |
| Critical | CVE-2022-38127 | Dell ECS: security vulnerability | — | |
| Critical | CVE-2022-28748 | Dell ECS: security vulnerability | — | |
| Critical | CVE-2021-3648 | Dell ECS: security vulnerability | — | |
| Critical | CVE-2023-2483 | Dell ECS: security vulnerability | — | |
| High | CVE-2025-1094 | PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation | 8.1 | |
| Critical | CVE-2007-4559 | Python Software Foundation CPython: Path Traversal | 9.8 | |
| Critical | CVE-2024-5535 | SSL_select_next_proto buffer overread | 9.1 | |
| Critical | CVE-2026-81467 | Dell ThinOS 10: OS Command Injection | 9.8 | |
| High | CVE-2023-24329 | Python Software Foundation CPython: security vulnerability | 7.5 | |
| Medium | CVE-2024-2511 | Unbounded memory growth with session handling in TLSv1.3 | 5.9 | |
| Critical | CVE-2026-81048 | Dell ThinOS 10: Command Injection | 9.6 | |
| Critical | CVE-2023-25690 | Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy | 9.8 | |
| Critical | CVE-2022-1471 | Remote Code execution in SnakeYAML | 8.3 | |
| Critical | CVE-2022-42889 | Apache Commons Text: Remote Code Execution | 9.8 | |
| Critical | CVE-2022-23521 | gitattributes parsing integer overflow in git | 9.8 | |
| Critical | CVE-2022-41903 | Integer overflow in `git archive`, `git log --format` leading to RCE in git | 9.8 |
News
- Dell patches 18 critical flaws that could hand attackers the keys to storage and Kubernetescsoonline,
- Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodesthehackernews,
- 58 hardware vulnerabilities: A guide to the threatscsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 33sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31sans-atrisk-mail,
- 17 old software bugs that took way too long to squashcsoonline,