CVE-2024-28964 | BDVDB-2026-239359 Detail

Description#

Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools. A local unauthenticated attacker could potentially exploit this vulnerability, leading to arbitrary code execution in the context of the logged in user. Exploitation of this issue requires a victim to open a malicious file.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-06-12Record published in the CVE List.
2. Version 22024-08-02Most recent update recorded in the CVE List.