VULNERABILITY INTELLIGENCE

CVE-2022-31636

CVSS score7.8 HIGH

EPSS probability0.14%

CISA KEVNot currently listed

Published2023-06-13

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.

Weakness classification

nvd@nist.gov: CWE-367
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-367

Primary references

hp-security-alert@hp.com — Broken Link, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Vendor Advisory