Search/CVE-2025-24311
● CVE — High

CVE-2025-24311

DiscoveredJun 13, 2025UpdatedApr 15, 2026

An out-of-bounds read vulnerability exists in the cv_send_blockdata functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an information leak. An attacker can issue an API call to trigger this vulnerability.

View graph Watch Export
CVSS v3.1
8.4 HIGH
EPSS
2.00%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
5
sources referencing this CVE
Related IOCs
1
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 0.48pp
1.52% → 2.00% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H
Connections
8 relationships
Timeline
disclosure → media coverage
Jun 13, 2025
Disclosure — published as a CVE record. · last revised by NVD Apr 15, 2026
Aug 5, 2025
therecord.media reports: ‘Critical’ firmware-level vulnerabilities found in laptops commonly used by security specialists
Aug 6, 2025
securityweek.com reports: Flaws Expose 100 Dell Laptop Models to Implants, Windows Login Bypass
Aug 6, 2025
bleepingcomputer.com reports: ReVault flaws let hackers bypass Windows login on Dell laptops
Aug 10, 2025
helpnetsecurity.com reports: Week in review: SonicWall firewalls targeted in ransomware attacks, Black Hat USA 2025
Aug 11, 2025
research.checkpoint.com reports: 11th August – Threat Intelligence Report