CVE-2025-43729
HIGHDescription
Dell ThinOS 10, versions prior to 2508_10.0127, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Elevation of Privileges and Unauthorized Access.
Is your site exposed to CVE-2025-43729?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| dell | thinos |
| dell | latitude_3330 |
| dell | latitude_3420 |
| dell | latitude_3440 |
| dell | latitude_3450 |
| dell | latitude_5440 |
| dell | latitude_5450 |
| dell | latitude_5520 |
| dell | latitude_5530 |
| dell | latitude_5540 |
| dell | latitude_5550 |
| dell | optiplex_3000_tc |
| dell | optiplex_5400_all-in-one |
| dell | optiplex_7020 |
| dell | optiplex_all-in-one_7410 |
| dell | optiplex_all-in-one_7420 |
| dell | optiplex_micro_plus_7010 |
| dell | precision_3260_compact |
| dell | precision_3280 |
| dell | pro_14_pc14250 |
| dell | pro_16_pc16250 |
| dell | pro_16_plus_pb16250 |
| dell | pro_24_all-in-one |
| dell | pro_max_14 |
| dell | pro_max_16_plus |
| dell | pro_rugged_13_ra13250 |
| dell | pro_rugged_14_rb14250 |
| dell | pro_slim_low_sff |
| dell | pro_tower_qct1250 |
| dell | wyse_5070_extended_thin_client |
| dell | wyse_5070_thin_client |
| dell | wyse_5470_all-in-one_thin_client |
| dell | wyse_5470_mtc |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2025-43729? +
How severe is CVE-2025-43729? +
What products are affected by CVE-2025-43729? +
How do I check if I'm vulnerable to CVE-2025-43729? +
Related Vulnerabilities
An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to …
NitroSense 3.x before 3.01.3052 contains Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom …
Incorrect Permission Assignment for Critical Resource vulnerability in ILM Informatique OpenConcerto allows Replace Binaries. This issue affects OpenConcerto: 1.7.5.
PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a …
An Incorrect Permission Assignment Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect permissions …
DaVinci Resolve on MacOS was found to be installed with incorrect file permissions (rwxrwxrwx). This is inconsistent with standard macOS …