CVE-2019-3735

7.8 highEPSS 0.3%

Dell SupportAssist for Business PCs version 2.0 and Dell SupportAssist for Home PCs version 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, and 3.2.1 contain an Improper Privilege Management Vulnerability. A malicious local user can exploit this vulnerability by inheriting a system thread using a leaked thread handle to gain system privileges on the affected machine.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2019-06-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:supportassist_for_business_pcs
dell:supportassist_for_home_pcs

References

http://www.dell.com/support/article/sln317453
http://www.dell.com/support/article/sln317453

Check your stack JSON