CVE-2022-38396
High
Description
HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on October 31, 2021.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Microsoft Windows
PublishedFeb 12, 2023
First seenFeb 12, 2023
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| microsoft windows_10_1507 | No range specified | — |
| microsoft windows_10_1511 | No range specified | — |
| microsoft windows_10_1607 | No range specified | — |
| microsoft windows_10_1703 | No range specified | — |
| microsoft windows_10_1709 | No range specified | — |
| microsoft windows_10_1803 | No range specified | — |
| microsoft windows_10_1809 | No range specified | — |
| microsoft windows_10_1909 | No range specified | — |
| microsoft windows_10_2004 | No range specified | — |
| microsoft windows_10_20h2 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.