Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2025-25215

An arbitrary free vulnerability exists in the cv_close functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an arbitrary free. An attacker can forge a fake session to trigger this vulnerability.

CVSS 8.8 · HighBuzz score 40.8

Buzz score

Why this CVE is surfacing

Buzz score total 40.8

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 20.8 · diversity 20.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
20.8
7 evidence mentions in the snapshot
Diversity score
20.0
7 sources across 4 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
7 source links · newest first
  • 11th August – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 11th August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Air France has experienced a data breach that resulted in unauthorized access to customer data through a compromised external customer service platform. The attack exposed personal information, including names, email addresses, phone […]

    vendorresearch.checkpoint.comAug 11, 2025, 12:20 PM
  • Over 100 Dell models exposed to critical ControlVault3 firmware bugsSecurity Affairs

    ReVault flaws in Dell ControlVault3 firmware allow firmware implants and Windows login bypass on 100+ laptop models via physical access. Cisco Talos reported five vulnerabilities collectively named ReVault (tracked as CVE-2025-24311, CVE-2025-25215, CVE-2025-24922, CVE-2025-25050, and CVE-2025-24919) in Dell’s ControlVault3 firmware that expose over 100 laptop models to firmware implants and Windows login bypass via physical […]

    newssecurityaffairs.comAug 7, 2025, 7:20 AM
  • ReVault flaws let attackers bypass Windows login or place malware implants on Dell laptopsCSO Online

    Flaws in the firmware that ships with more than 100 models of Dell business laptops compromise the hardware designed to secure passwords and biometric data. Vulnerabilities in the ControlVault3 (CV) firmware in Dell laptops, discovered by security researchers from Cisco Talos, allow attackers with physical access to bypass Windows login on vulnerable laptops or let […]

    newswww.csoonline.comAug 6, 2025, 8:54 PM
  • Flaws Expose 100 Dell Laptop Models to Implants, Windows Login BypassSecurityWeek

    ReVault vulnerabilities in the ControlVault3 firmware in Dell laptops could lead to firmware modifications or Windows login bypass.

    newswww.securityweek.comAug 6, 2025, 11:35 AM
  • Millions of Dell laptops could be persistently backdoored in ReVault attacksHelp Net Security

    A set of firmware vulnerabilities affecting 100+ Dell laptop models widely used in government settings and by the cybersecurity industry could allow attackers to achieve persistent access even across Windows reinstalls, Cisco Talos researchers have discovered. About the vulnerabilities Most of the flaws reside in the firmware for ControlVault3 and ControlVault3+, which are hardware security components that store passwords, biometric templates, and security codes. The lists includes: Two out-of-bounds vulnerabilities (CVE-2025-24311, CVE-2025-25050) An arbitrary free … More →

    newswww.helpnetsecurity.comAug 5, 2025, 6:14 PM
  • https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2129www.talosintelligence.com

    No excerpt available.

    Exploitwww.talosintelligence.comJun 13, 2025, 10:15 PM
  • https://www.dell.com/support/kbdoc/en-us/000276106/dsa-2025-053www.dell.com

    No excerpt available.

    Vendor Advisorywww.dell.comJun 13, 2025, 10:15 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence