What’s Vulnerable › Vulnerabilities

CVE-2022-23927

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-11 · updated 2026-10-08

Description

Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.

Affected products

• HP PC BIOS: before 02.07.10 — fixed in 02.07.10

How to fix

Upgrade to a fixed version: HP PC BIOS 02.07.10. Check the vendor advisory for mitigations.

References

• https://support.hp.com/us-en/document/ish_5817864-5817896-16
• https://support.hp.com/us-en/document/ish_5817864-5817896-16

Get alerted when CVE-2022-23927 or the next vulnerability affects your stack