CVEvulnerability
CVE-2022-38396
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-02-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on October 31, 2021.
Affected configurations
• microsoft windows 10 1507
• microsoft windows 10 1511
• microsoft windows 10 1607
• microsoft windows 10 1703
• microsoft windows 10 1709
• microsoft windows 10 1803
• microsoft windows 10 1809
• microsoft windows 10 1909
• microsoft windows 10 2004
• microsoft windows 10 20h2
References
- https://support.hp.com/ie-en/document/ish_7620368-7620413-16 Vendor Advisory
- https://support.hp.com/ie-en/document/ish_7620368-7620413-16 Vendor Advisory