CVE-2025-25215

8.8 highEPSS 2.7%

High (8.8). EPSS 2.7% chance of exploitation in the next 30 days.

An arbitrary free vulnerability exists in the cv_close functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an arbitrary free. An attacker can forge a fake session to trigger this vulnerability.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-763
Published: 2025-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.dell.com/support/kbdoc/en-us/000276106/dsa-2025-053
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2129

Check your stack JSON