CVE-2021-3661

CVE-2021-3661 refers to a potential vulnerability in HP Workstation BIOS (UEFI firmware) that may allow arbitrary code execution. The associated documents indicate a locally exploitable issue with a high CVSS v3.1 score (8.4), requiring no user interaction and affecting confidentiality, integrity...

CVE-2021-3437

CVE-2021-3437 affects the HP OMEN Gaming Hub driver HpPortIox64.sys, which inherits vulnerability characteristics from WinRing0.sys. The issue allows local privilege escalation and potential DoS by abusing IOCTLs exposed by the driver without ACL enforcement, enabling kernel-mode code execution a...

CVE-2021-3437

Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing software updates to mitigate the potential vulnerabilities...

CVE-2022-37018

A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability...

CVE-2022-37018

A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability...

CVE-2022-37018

CVE-2022-37018 concerns a potential vulnerability in the system BIOS on certain HP PC products that could allow privilege escalation and code execution. The issue is tied to the BIOS/firmware layer, with a high impact (confidentiality, integrity, availability all high) and a local attack vector w...

CVE-2022-1038

CVE-2022-1038 describes a potential privilege-escalation vulnerability in HP Jumpstart. The connected HP advisory indicates HP Jumpstart has been discontinued and replaced by the myHP software; HP recommends uninstalling Jumpstart and using myHP, with a Jumpstart Removal tool provided. Exploitati...

CVE-2022-1038

A potential security vulnerability has been identified in the HP Jumpstart software, which might allow escalation of privilege. HP is recommending that customers uninstall HP Jumpstart and use myHP software...

CVE-2022-1038

A potential security vulnerability has been identified in the HP Jumpstart software, which might allow escalation of privilege. HP is recommending that customers uninstall HP Jumpstart and use myHP software...

PT-2022-10889 · Hewlett Packard · Hp Command Center +1

Name of the Vulnerable Software and Affected Versions: OMEN Gaming Hub affected versions not specified HP Command Center affected versions not specified Description: A potential security issue has been identified that may allow escalation of privilege and/or denial of service. Recommendations: Fo...

PT-2022-10698 · Hewlett Packard · Hp Multifunction Printers +1

Name of the Vulnerable Software and Affected Versions: HP multifunction printers MFPs affected versions not specified Description: A potential security issue has been identified that may cause Denial of Service when running HP Workpath solutions on certain products. Recommendations: At the moment...

CVE-2022-38395

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up...

CVE-2022-38395

Summary: CVE-2022-38395 affects HP Support Assistant that uses Fusion to launch HP Performance Tune-up. The underlying issue is a DLL hijacking vulnerability that could allow a local attacker to elevate privileges when Fusion starts the HP Performance Tune-up. What’s affected (supported by docume...

CVE-2022-38395

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up...

CVE-2022-2794

Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack...

CVE-2022-2794

Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack...

CVE-2022-2794

CVE-2022-2794 concerns HP PageWide Pro Printers, where the vulnerability could allow a denial-of-service condition. Public details in the NVD entry note a network-accessible issue with a high CVSS base score (7.5) and low attack complexity. HP has issued an advisory (HPSBPI03807) indicating firmw...

CVE-2022-43780

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack...

CVE-2022-43780

Certain HP ENVY, OfficeJet, and DeskJet printers may be vulnerable to a Denial of Service attack...

CVE-2022-43780

CVE-2022-43780 affects HP ENVY, OfficeJet and DeskJet printers. Documents describe a Denial of Service vulnerability with network exposure (CVSSv3.1 base 7.5, HIGH). Affected component/root cause are not explicitly detailed in the provided sources. Remediation is recommended as a printer firmware...