Hp Inc. Hp Support Assistant vulnerabilities

CVE-2025-43019 [MEDIUM] CWE-269 CVE-2025-43019: A potential security vulnerability has been identified in the HP Support Assistant, which allows a l A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion.

CVE-2022-23453 [HIGH] CWE-276 CVE-2022-23453: Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabiliti Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.

CVE-2022-23454 [HIGH] CWE-276 CVE-2022-23454: Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabiliti Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.

CVE-2022-23455 [HIGH] CWE-269 CVE-2022-23455: Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabiliti Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.

CVE-2022-38395 [HIGH] CWE-427 CVE-2022-38395: HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fus HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.

CVE-2017-2744 [MEDIUM] CWE-200 CVE-2017-2744: The vulnerability allows attacker to extract binaries into protected file system locations in HP Sup The vulnerability allows attacker to extract binaries into protected file system locations in HP Support Assistant before 12.7.26.1.