Threat database

CVE-2025-46636 is a medium severity vulnerability in Dell Encryption versions prior to 11.12.1 involving improper link resolution before file access (CWE-59). A low privileged local attacker can exploit this flaw by tricking the software into following symbolic links, potentially leading to information tampering. The vulnerability requires local access and some user interaction, with no impact on confidentiality but high impact on integrity and availability. No known exploits are currently reported in the wild. European organizations using Dell Encryption should prioritize patching once updates are available and implement strict local access controls. Countries with high Dell enterprise software adoption and critical infrastructure using encryption solutions are at greater risk. The vulnerability’s CVSS score is 6.6, reflecting moderate risk due to the attack complexity and limited scope.