Approved changes feed: RSS · Atom

cpe:2.3:a:dell:grab_for_windows:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductGrab For Windows (dec097c0-ab3e-5ffa-98cf-a4f7606c3f8b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25958 vulnerable 2026-06-08 06:31:24.158083 Details available
MEDIUM (6.7)
Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of application data and service disruption.
Published: 2024-03-26T15:18:52.198Z
Updated: 2024-08-02T15:54:56.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25957 vulnerable 2026-06-08 06:31:24.156462 Details available
MEDIUM (4.8)
Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync application with elevated privileges.
Published: 2024-03-26T15:26:26.090Z
Updated: 2024-08-02T19:56:11.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25956 vulnerable 2026-06-08 06:31:24.156052 Details available
MEDIUM (5.5)
Dell Grab for Windows, versions 5.0.4 and below, contains an improper file permissions vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the information disclosure of certain system information.
Published: 2024-03-26T15:31:02.386Z
Updated: 2024-08-02T16:20:38.599Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.