HP PC BIOS vulnerabilities | LiveThreat CVE Feed

Product

HP PC BIOS

by HP Inc. · last CVE Jun 28, 2024

CVEs

On KEV

8.2

Max CVSS

New 30D

Vulnerabilities23 In the news0 Timeline

Severity mix

Critical 0High 22Medium 1Low 0

Severity

All severities23 Critical0 High22 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add HP PC BIOS to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-5410	8.2	0%	Mar 12	A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering Affected: See HP Security Bulletin reference for affected versions
CVE-2022-27540	7.8	0%	Jun 28	A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-31646	7.8	0%	Jun 14	Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of… Affected: See HP Security Bulletin reference for affected versions
CVE-2022-31645	7.8	0%	Jun 14	Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-31644	7.8	0%	Jun 14	Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-31639	7.8	0%	Jun 13	Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-31638	7.8	0%	Jun 13	Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-31637	7.8	0%	Jun 13	Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-31636	7.8	0%	Jun 13	Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-31635	7.8	0%	Jun 13	Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-43778	7.8	0%	Jun 12	Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-43777	7.8	0%	Jun 12	Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-27541	7.8	0%	Jun 12	Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-27539	7.8	0%	Jun 12	Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of… Affected: See HP Security Bulletin reference for affected versions.
CVE-2021-3439	7.8	0%	Jan 30	HP has identified a potential vulnerability in BIOS firmware of some Workstation products Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-27537	7.8	0%	Jan 30	Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of… Affected: See HP Security Bulletin reference for affected versions.
CVE-2021-3809	7.8	0%	Jan 30	Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution Affected: See HP Security Bulletin reference for affected versions.
CVE-2021-3808	7.8	0%	Jan 30	Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-31642	7.0	0%	Jun 14	Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-31641	7.0	0%	Jun 14	Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-31640	7.0	0%	Jun 14	Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-27538	7.0	0%	Jan 30	A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of… Affected: See HP Security Bulletin reference for affected versions.
CVE-2022-31643	5.5	0%	Apr 28	A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity Affected: See HP Security Bulletin reference for affected versions.