What’s Vulnerable › Vulnerabilities
CVE-2024-27458: HP Hotkey Support – Escalation of Privilege
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-10-07 · updated 2026-06-17
- Weakness: CWE-59
Description
A potential security vulnerability has been identified in the HP Hotkey Support software, which might allow local escalation of privilege. HP is releasing mitigation for the potential vulnerability. Customers using HP Programmable Key are recommended to update HP Hotkey Support.
Affected products
- HP Engage Go 10 Mobile System Firmware: from 8.10.42.190 before 8.10.42.190_rev1 — fixed in 8.10.42.190_rev1
How to fix
Upgrade to a fixed version: HP Engage Go 10 Mobile System Firmware 8.10.42.190_rev1. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-27458 or the next vulnerability affects your stack