CVE-2022-26864

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-23 · updated 2026-06-17
Weakness: CWE-20

Description

Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM.

Affected products

Dell Alienware M15 R5 Firmware: before 1.5.0 — fixed in 1.5.0
Dell G15 5515 Firmware: before 1.6.0 — fixed in 1.6.0
Dell G5 Se 5505 Firmware: before 1.11.0 — fixed in 1.11.0
Dell Inspiron 14 5425 Firmware: before 1.2.1 — fixed in 1.2.1
Dell Inspiron 27 7775 Firmware: before 2.16.1 — fixed in 2.16.1
Dell Inspiron 3180 Firmware: before 1.4.4 — fixed in 1.4.4
Dell Inspiron 3185 Firmware: before 1.4.4 — fixed in 1.4.4
Dell Inspiron 3195 Firmware: before 1.4.1 — fixed in 1.4.1
Dell Inspiron 3275 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Inspiron 3475 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Inspiron 3505 Firmware: before 1.6.0 — fixed in 1.6.0
Dell Inspiron 3515 Firmware: before 1.5.0 — fixed in 1.5.0
Dell Inspiron 3525 Firmware: before 1.3.0 — fixed in 1.3.0
Dell Inspiron 3585 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Inspiron 3595 Firmware: before 1.3.0 — fixed in 1.3.0
Dell Inspiron 3785 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Inspiron 5405 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Inspiron 5415 All-In-One Firmware: before 1.5.0 — fixed in 1.5.0
Dell Inspiron 5415 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Inspiron 5485 Firmware: before 2.8.0 — fixed in 2.8.0
Dell Inspiron 5505 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Inspiron 5515 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Inspiron 5575 Firmware: before 1.6.0 — fixed in 1.6.0
Dell Inspiron 5585 Firmware: before 2.8.0 — fixed in 2.8.0
Dell Inspiron 7375 Firmware: before 1.7.0 — fixed in 1.7.0
Dell Inspiron 7405 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Inspiron 7415 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Inspiron 7425 Firmware: before 1.2.1 — fixed in 1.2.1
Dell Vostro 3405 Firmware: before 1.6.0 — fixed in 1.6.0
Dell Vostro 3515 Firmware: before 1.5.0 — fixed in 1.5.0

How to fix

Upgrade to a fixed version: Dell Alienware M15 R5 Firmware 1.5.0; Dell G15 5515 Firmware 1.6.0; Dell G5 Se 5505 Firmware 1.11.0; Dell Inspiron 14 5425 Firmware 1.2.1; Dell Inspiron 27 7775 Firmware 2.16.1; Dell Inspiron 3180 Firmware 1.4.4; Dell Inspiron 3185 Firmware 1.4.4; Dell Inspiron 3195 Firmware 1.4.1; Dell Inspiron 3275 Firmware 1.9.0; Dell Inspiron 3475 Firmware 1.9.0; Dell Inspiron 3505 Firmware 1.6.0; Dell Inspiron 3515 Firmware 1.5.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-26864 or the next vulnerability affects your stack