← Database

CVE-2022-27538

HIGH CVSS: 7.0 Published: 2023-02-01 Modified: 2026-06-17

Description

A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.

Affected Platforms

Hp Elitebook 850 G8Hp Elitedesk 800 G5 Desktop Mini PcHp Probook 430 G5Hp Elitedesk 800 G5 Tower Pc FirmwareHp Prodesk 600 G5 Small Form Factor PcHp Elitebook 640 G9Hp Probook X360 11 G4 Education Edition FirmwareHp Elitebook 855 G7 FirmwareHp Probook 455 G9Hp Probook 455 G7 Firmware

Weakness Type

CWE-367, CWE-367

References