CVE-2025-36564 Privilege escalation in Encryption Admin Utilities
A local attacker can exploit improper link resolution in Dell Encryption Admin Utilities to escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-36564?
CVE-2025-36564 is a high-severity vulnerability in Dell Encryption Admin Utilities, published on 3 Jun 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation.
Which versions are affected by CVE-2025-36564?
It affects 1 product.
Products include Dell Encryption.
How do I fix CVE-2025-36564?
No fix has been published for CVE-2025-36564 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-36564 being exploited?
There is no known exploitation of CVE-2025-36564 in the wild and no public exploit code.
Other vulnerabilities in Dell Encryption Admin Utilities
- CVE-2018-15766 Dell Encryption and Dell Endpoint Security Suite Enterprise Security Policy Overwrite Vulnerability
- CVE-2025-46637 Path traversal in Dell Encryption
- CVE-2025-36611 Path traversal in Encryption
- CVE-2023-32479 Privilege escalation in Dell Encryption
- CVE-2020-5385 Privilege escalation in Dell Encryption Enterprise
Sources
Also known as GHSA-vq5j-6vrq-2cm6.