CVE-2022-38396

moderate-risk

Published 2023-02-12

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on October 31, 2021.

Do I need to act?

0.57% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (10)

Windows 10 1507

Windows 10 1511

Windows 10 1607

Windows 10 1703

Windows 10 1709

Windows 10 1803

Windows 10 1809

Windows 10 1909

Windows 10 2004

Windows 10 20H2

Affected Vendors

Microsoft

References (2)

Vendor Advisory https://support.hp.com/ie-en/document/ish_7620368-7620413-16

/ 100

moderate-risk

Severity 24/34 · High

Exploitability 2/34 · Minimal

Exposure 16/34 · Moderate