Approved changes feed: RSS · Atom

cpe:2.3:a:dell:controlvault3:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductControlvault3 (8d40540b-defd-54ee-bd80-372794343473)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36553 vulnerable 2026-06-08 07:21:01.884085 Dell ControlVault3 CvManager buffer overflow vulnerability
HIGH (8.8)
A buffer overflow vulnerability exists in the CvManager functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability.
Published: 2025-11-17T22:26:32.197Z
Updated: 2026-02-26T16:56:55.510Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36463 vulnerable 2026-06-08 07:21:01.782175 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability
HIGH (7.3)
Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 4 (`WBIO_USH_ADD_RECORD`) and with an invalid `SendBufferSize`.
Published: 2025-11-17T22:51:10.804Z
Updated: 2026-02-26T16:56:52.703Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36462 vulnerable 2026-06-08 07:21:01.781672 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability
HIGH (7.3)
Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 3 (`WBIO_USH_CREATE_CHALLENGE`) with an invalid `ReceiveBuferSize`.
Published: 2025-11-17T22:50:46.863Z
Updated: 2026-02-26T16:56:53.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36461 vulnerable 2026-06-08 07:21:01.781081 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability
HIGH (7.3)
Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 0 (`WBIO_USH_GET_TEMPLATE`) and with either and an invalid `ReceiveBuferSize` and/or an invalid `SendBufferSize`.
Published: 2025-11-17T22:50:19.544Z
Updated: 2026-02-26T16:56:53.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36460 vulnerable 2026-06-08 07:21:01.779646 Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter out-of-bounds write vulnerability
HIGH (7.3)
Multiple out-of-bounds read and write vulnerabilities exist in the ControlVault WBDI Driver Broadcom Storage Adapter functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted WinBioControlUnit call can lead to memory corruption. An attacker can issue an api call to trigger this vulnerability. This vulnerability is triggered when submitting a `WinBioControlUnit` call to the StorageAdapter with the ControlCode 2 (`WBIO_USH_GET_IDENTITY`) with an improper `ReceiveBuferSize` value.
Published: 2025-11-17T22:47:21.793Z
Updated: 2026-02-26T16:56:54.419Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32089 vulnerable 2026-06-08 07:18:59.024447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31649 vulnerable 2026-06-08 07:18:58.308027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31361 vulnerable 2026-06-08 07:17:02.774594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25215 vulnerable 2026-06-08 07:12:50.851286 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25050 vulnerable 2026-06-08 07:12:50.584119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24922 vulnerable 2026-06-08 07:12:50.172477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24919 vulnerable 2026-06-08 07:12:50.171067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24311 vulnerable 2026-06-08 07:12:48.446698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.