← Vulnerability feed

Vulnerability record · CVE-2025-46637 · published 9 December 2025

CVE-2025-46637: Dell encryption link following vulnerability

Dell · Encryption

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A local malicious user could potentially exploit this vulnerability, leading to Elevation of privileges.

7.3 CVSS 3.1 High EPSS 0.10% · top 99.1% CWE-59 · Link following
7.3CVSS 3.1 base score
0.10%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A local malicious user could potentially exploit this vulnerability, leading to Elevation of privileges.

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.dell.com/support/kbdoc/en-us/000394657/dsa-2025-442 Vendor Advisory

Track CVE-2025-46637 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2025-36611Dell encryption link following vulnerabilityDell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access ('Link Followi…EPSS 0.14%7.8CVE-2025-36564Dell encryption link following vulnerabilityDell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution vulnerability. A local malicious user could potentially…EPSS 0.13%7.8CVE-2023-32479Dell encryption improper access control vulnerabilityDell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation v…EPSS 0.09%7.8CVE-2020-5385Dell encryption incorrect permission assignment vulnerabilityDell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability because of…EPSS 0.18%7.8CVE-2020-5358Dell encryption incorrect permission assignment vulnerabilityDell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege escalation vulnerability due to inc…EPSS 0.19%7.5CVE-2018-15766Dell encryption weak password requirements vulnerabilityOn install, Dell Encryption versions prior 10.0.1 and Dell Endpoint Security Suite Enterprise versions prior 2.0.1 will overwrite and manually set th…EPSS 0.55%7.3CVE-2023-39246Dell endpoint security suite enterprise link following vulnerabilityDell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation o…EPSS 0.15%7.3CVE-2019-3745Dell encryption uncontrolled search path element vulnerabilityThe vulnerability is limited to the installers of Dell Encryption Enterprise versions prior to 10.4.0 and Dell Endpoint Security Suite Enterprise ver…EPSS 0.29%

Source: NIST National Vulnerability Database (record CVE-2025-46637), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.