CVE Tools
Track your stack

OS Recovery Tool

6 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for OS Recovery Tool, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

OS Recovery Tool CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
OS Recovery Tool CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-101
2026-112

Severity

How the 6 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • High467%
  • Low233%

Latest CVEs

The 6 most recently published vulnerabilities affecting OS Recovery Tool.

  1. CVE-2026-82155Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, lea...7.8
  2. CVE-2026-82154Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerab...2.4
  3. CVE-2026-82153Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vu...2.2
  4. CVE-2023-39253 Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this v...7.3
  5. CVE-2023-39259 Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this v...7.3
  6. CVE-2023-28066 Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability...7.3

Product grouping is registry-driven, with AI assist and human review. How it works