CVE-2022-37019

A security vulnerability exists in the system BIOS of certain HP PC products , including laptops and workstations. The root cause is the improper assignment of permissions for a critical resource within the BIOS microprogramming software. Exploitation of this flaw allows an attacker to achieve es...

CVE-2021-3439

The CVE-2021-3439 entry concerns a vulnerability in BIOS firmware of some HP Workstation products. Public sources indicate a potential flaw in the BIOS firmware that HP is mitigating with firmware updates. The NVD entry assigns a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW at...

CVE-2022-27537

CVE-2022-27537 concerns HP PC BIOS vulnerabilities that could enable arbitrary code execution, privilege escalation, denial of service, and information disclosure. Connected sources indicate the issue affects HP system BIOS with mitigations in BIOS updates; HP documents list affected platforms an...

CVE-2022-37018

CVE-2022-37018 concerns a potential vulnerability in the system BIOS on certain HP PC products that could allow privilege escalation and code execution. The issue is tied to the BIOS/firmware layer, with a high impact (confidentiality, integrity, availability all high) and a local attack vector w...

CVE-2022-27540

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the HP BIOS for certain HP PC products. This flaw could potentially allow an attacker to achieve arbitrary code execution , denial of service , and information disclosure . HP has released BIOS updates to mitigate this vulnerability;...

CVE-2022-31645

CVE-2022-31645 is described as a BIOS/SMM vulnerability affecting HP PC products, with potential for arbitrary code execution, privilege escalation, DoS, and information disclosure. Connected sources indicate root cause as memory corruption/out-of-bounds write in the System Management Mode (SMM) ...

CVE-2022-37020

Potential vulnerabilities exist in the system BIOS of certain HP PC products (laptops and workstations). The root cause is the improper assignment of permissions for a critical resource in the BIOS microprogramming software, which could allow an attacker to achieve privilege escalation and arbitr...

CVE-2022-31644

CVE-2022-31644 affects HP PC BIOS firmware, with a root cause described as an SMM/UEFI vulnerability leading to memory corruption (out-of-bounds write) that could permit arbitrary code execution, privilege escalation, DoS, or information disclosure. HP has released mitigations via BIOS updates (m...

CVE-2019-16284

CVE-2019-16284 concerns a BIOS/firmware vulnerability in HP products where the EFI_BOOT_SERVICES structure can be overwritten to execute arbitrary SMM code, potentially leading to privilege escalation during boot. The Red Hat and NVD entries align with HP’s advisory (HP: C06456250), describing af...

CVE-2022-31646

CVE-2022-31646 concerns a vulnerability in the system BIOS of certain HP PC products. The affected component is the BIOS/firmware, with HP noting potential arbitrary code execution, privilege escalation, denial of service, and information disclosure. The CVE is referenced across multiple feeds (N...