A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.
Search vulnerabilities
CVE-2022-27540
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2022-31643
A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability.
CVSS 3.1 · 5.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2023-4499
A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and Software Download Tool) which may lead to information disclosure. HP is releasing mitigation for the potential vulnerability.
CVSS 3.1 · 7.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.