What’s Vulnerable › Vulnerabilities

CVE-2022-38396

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-02-03 · updated 2026-06-17

Description

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on October 31, 2021.

Affected products

• Microsoft Windows 10 Version 1507: all versions
• Microsoft Windows 10 1511: all versions
• Microsoft Windows 10 1607: all versions
• Microsoft Corporation Windows 10 1703: all versions
• Microsoft Windows 10 1709: all versions
• Microsoft Windows 10 1803: all versions
• Microsoft Windows 10: all versions
• Microsoft Windows 10 1909: all versions
• Microsoft Windows 10 2004: all versions
• Microsoft Windows 10 20H2: all versions
• HP Inc. HP Factory Preinstalled Windows 10 20H2 Images: See HP Security Bulletin reference for affected versions.

References

• https://support.hp.com/ie-en/document/ish_7620368-7620413-16
• https://support.hp.com/ie-en/document/ish_7620368-7620413-16

Get alerted when CVE-2022-38396 or the next vulnerability affects your stack