Back to CVE records
High 7.5Published Nov 12, 2021
CVE-2021-36324Dell BIOS contains an improper input validation vulnerability.
Updated under an hour ago ()
Does this affect you?
It affects Dell CPG BIOS and 59 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
- Weakness (CWE)
- CWE-20
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- dell
- NVD analysis
- Modified
- Record last updated
- Oct 8, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Dell CPG BIOS dell:cpg_bios (from the name) | from unspecified before 1.13.0 | CNA record |
dell alienware_13_r3_firmware dell:alienware_13_r3_firmware | before 1.13.0 | NVD |
dell alienware_15_r3_firmware dell:alienware_15_r3_firmware | before 1.13.0 | NVD |
dell alienware_15_r4_firmware dell:alienware_15_r4_firmware | before 1.14.0 | NVD |
dell alienware_17_r4_firmware dell:alienware_17_r4_firmware | before 1.13.0 | NVD |
dell alienware_17_r5_firmware dell:alienware_17_r5_firmware | before 1.14.0 | NVD |
dell alienware_area_51m_r1_firmware dell:alienware_area_51m_r1_firmware | before 1.15.1 | NVD |
dell alienware_area_51m_r2_firmware dell:alienware_area_51m_r2_firmware | before 1.10.0 | NVD |
dell alienware_aurora_r11_firmware dell:alienware_aurora_r11_firmware | before 1.0.9 | NVD |
dell alienware_aurora_r12_firmware dell:alienware_aurora_r12_firmware | before 1.1.7 | NVD |
dell alienware_aurora_r7_firmware dell:alienware_aurora_r7_firmware | before 1.0.25 | NVD |
dell alienware_aurora_r8_firmware dell:alienware_aurora_r8_firmware | before 1.0.17 | NVD |
dell alienware_aurora_r9_firmware dell:alienware_aurora_r9_firmware | before 1.0.14 | NVD |
dell alienware_aurora_ryzen_edition_firmware dell:alienware_aurora_ryzen_edition_firmware | before 2.2.4 | NVD |
dell alienware_m15_r1_firmware dell:alienware_m15_r1_firmware | before 2.9.0 | NVD |
dell alienware_m15_r2_firmware dell:alienware_m15_r2_firmware | before 1.9.0 | NVD |
dell alienware_m15_r3_firmware dell:alienware_m15_r3_firmware | before 1.11.0 | NVD |
dell alienware_m17_r1_firmware dell:alienware_m17_r1_firmware | before 2.9.0 | NVD |
dell alienware_m17_r2_firmware dell:alienware_m17_r2_firmware | before 1.9.0 | NVD |
dell alienware_m17_r3_firmware dell:alienware_m17_r3_firmware | before 1.11.0 | NVD |
dell alienware_x15_r1_firmware dell:alienware_x15_r1_firmware | before 1.4.0 | NVD |
dell alienware_x17_r1_firmware dell:alienware_x17_r1_firmware | before 1.4.0 | NVD |
dell chengming_3977_firmware dell:chengming_3977_firmware | before 1.13.0 | NVD |
dell chengming_3980_firmware dell:chengming_3980_firmware | before 2.19.0 | NVD |
dell chengming_3988_firmware dell:chengming_3988_firmware | before 1.7.0 | NVD |
dell chengming_3990_firmware dell:chengming_3990_firmware | before 1.5.1 | NVD |
dell chengming_3991_firmware dell:chengming_3991_firmware | before 1.5.1 | NVD |
dell g3_3579_firmware dell:g3_3579_firmware | before 1.17.0 | NVD |
dell g3_3590_firmware dell:g3_3590_firmware | before 1.14.0 | NVD |
dell g3_3779_firmware dell:g3_3779_firmware | before 1.17.0 | NVD |
dell g5_5000_firmware dell:g5_5000_firmware | before 1.3.0 | NVD |
dell g5_5090_firmware dell:g5_5090_firmware | before 1.9.0 | NVD |
dell g5_5587_firmware dell:g5_5587_firmware | before 1.17.0 | NVD |
dell g5_5590_firmware dell:g5_5590_firmware | before 1.16.0 | NVD |
dell g7_7587_firmware dell:g7_7587_firmware | before 1.17.0 | NVD |
dell g7_7588_firmware dell:g7_7588_firmware | through 1.17.0 | NVD |
dell g7_7590_firmware dell:g7_7590_firmware | through 1.16.0 | NVD |
dell g7_7790_firmware dell:g7_7790_firmware | through 1.16.0 | NVD |
dell embedded_box_pc_5000_firmware dell:embedded_box_pc_5000_firmware | before 1.11.0 | NVD |
dell inspiron_13_5378_firmware dell:inspiron_13_5378_firmware | before 1.34.0 | NVD |
dell inspiron_13_5379_firmware dell:inspiron_13_5379_firmware | before 1.17.0 | NVD |
dell inspiron_14_3467_firmware dell:inspiron_14_3467_firmware | before 2.16.0 | NVD |
dell inspiron_14_5468_firmware dell:inspiron_14_5468_firmware | before 1.15.0 | NVD |
dell inspiron_15_3567_firmware dell:inspiron_15_3567_firmware | before 2.16.0 | NVD |
dell inspiron_15_5566_firmware dell:inspiron_15_5566_firmware | before 1.15.0 | NVD |
dell inspiron_15_5578_firmware dell:inspiron_15_5578_firmware | before 1.34.0 | NVD |
dell inspiron_15_5579_firmware dell:inspiron_15_5579_firmware | before 1.17.0 | NVD |
dell inspiron_15_5582_firmware dell:inspiron_15_5582_firmware | before 2.11.0 | NVD |
dell inspiron_15_7570_firmware dell:inspiron_15_7570_firmware | before 1.20.0 | NVD |
dell inspiron_15_7572_firmware dell:inspiron_15_7572_firmware | before 1.8.0 | NVD |
dell inspiron_15_7573_firmware dell:inspiron_15_7573_firmware | before 1.20.0 | NVD |
dell inspiron_15_7577_firmware dell:inspiron_15_7577_firmware | before 1.14.0 | NVD |
dell inspiron_17_7773_firmware dell:inspiron_17_7773_firmware | before 1.17.0 | NVD |
dell inspiron_3268_firmware dell:inspiron_3268_firmware | before 1.17.1 | NVD |
dell inspiron_3277_firmware dell:inspiron_3277_firmware | before 1.16.0 | NVD |
dell inspiron_3280_firmware dell:inspiron_3280_firmware | before 1.12.0 | NVD |
dell inspiron_3470_firmware dell:inspiron_3470_firmware | before 2.19.0 | NVD |
dell inspiron_3471_firmware dell:inspiron_3471_firmware | before 1.7.0 | NVD |
dell inspiron_3476_firmware dell:inspiron_3476_firmware | before 1.14.0 | NVD |
dell inspiron_3477_firmware dell:inspiron_3477_firmware | before 1.16.0 | NVD |
References
- https://www.dell.com/support/kbdoc/en-us/000192967x-refsource-misc
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.