{"id":"CVE-2021-39299","aliases":["EUVD-2021-25660","GHSA-6cjf-94vf-f544"],"status":"published","title":"Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which...","description":"Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00369,"percentile":0.31146,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2022-02-16T16:38:13Z","modified":"2026-10-07T21:31:22Z","products":[{"vendor":"hp","product":"260_g3_desktop_mini_pc_firmware"},{"vendor":"hp","product":"elite_dragonfly_firmware"},{"vendor":"hp","product":"elite_dragonfly_g2_firmware"},{"vendor":"hp","product":"elite_dragonfly_max_firmware"},{"vendor":"hp","product":"elite_x2_1013_g3_firmware"},{"vendor":"hp","product":"elite_x2_g4_firmware"},{"vendor":"hp","product":"elite_x2_g8_tablet_firmware"},{"vendor":"hp","product":"elitebook_1050_g1_firmware"},{"vendor":"hp","product":"elitebook_830_g5_firmware"},{"vendor":"hp","product":"elitebook_830_g6_firmware"},{"vendor":"hp","product":"elitebook_830_g7_firmware"},{"vendor":"hp","product":"elitebook_830_g8_firmware"},{"vendor":"hp","product":"elitebook_836_g5_firmware"},{"vendor":"hp","product":"elitebook_836_g6_firmware"},{"vendor":"hp","product":"elitebook_840_aero_g8_firmware"},{"vendor":"hp","product":"elitebook_840_g5_firmware"},{"vendor":"hp","product":"elitebook_840_g5_healthcare_edition_firmware"},{"vendor":"hp","product":"elitebook_840_g6_firmware"},{"vendor":"hp","product":"elitebook_840_g6_healthcare_edition_firmware"},{"vendor":"hp","product":"elitebook_840_g7_firmware"},{"vendor":"hp","product":"elitebook_840_g8_firmware"},{"vendor":"hp","product":"elitebook_840r_g4_firmware"},{"vendor":"hp","product":"elitebook_846_g5_firmware"},{"vendor":"hp","product":"elitebook_850_g5_firmware"},{"vendor":"hp","product":"elitebook_850_g6_firmware"},{"vendor":"hp","product":"elitebook_850_g7_firmware"},{"vendor":"hp","product":"elitebook_850_g8_firmware"},{"vendor":"hp","product":"elitebook_x360_1030_g3_firmware"},{"vendor":"hp","product":"elitebook_x360_1030_g4_firmware"},{"vendor":"hp","product":"elitebook_x360_1030_g7_firmware"},{"vendor":"hp","product":"elitebook_x360_1030_g8_firmware"},{"vendor":"hp","product":"elitebook_x360_1040_g5_firmware"},{"vendor":"hp","product":"elitebook_x360_1040_g6_firmware"},{"vendor":"hp","product":"elitebook_x360_1040_g7_firmware"},{"vendor":"hp","product":"elitebook_x360_1040_g8_firmware"},{"vendor":"hp","product":"elitebook_x360_830_g5_firmware"},{"vendor":"hp","product":"elitebook_x360_830_g6_firmware"},{"vendor":"hp","product":"elitebook_x360_830_g7_firmware"},{"vendor":"hp","product":"elitebook_x360_830_g8_firmware"},{"vendor":"hp","product":"elitedesk_800_35w_g4_desktop_mini_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_65w_g4_desktop_mini_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_95w_g4_desktop_mini_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_g4_small_form_factor_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_g4_tower_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_g4_workstation_edition_firmware"},{"vendor":"hp","product":"elitedesk_800_g5_desktop_mini_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_g5_small_form_factor_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_g5_tower_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_g6_desktop_mini_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_g6_small_form_factor_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_g6_tower_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_g8_desktop_mini_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_g8_small_form_factor_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_g8_tower_pc_firmware"},{"vendor":"hp","product":"elitedesk_805_g6_desktop_mini_pc_firmware"},{"vendor":"hp","product":"elitedesk_805_g6_small_form_factor_pc_firmware"},{"vendor":"hp","product":"elitedesk_805_g8_desktop_mini_pc_firmware"},{"vendor":"hp","product":"elitedesk_805_g8_small_form_factor_pc_firmware"},{"vendor":"hp","product":"elitedesk_880_g4_tower_pc_firmware"},{"vendor":"hp","product":"elitedesk_880_g5_tower_pc_firmware"},{"vendor":"hp","product":"elitedesk_880_g6_tower_pc_firmware"},{"vendor":"hp","product":"elitedesk_880_g8_tower_pc_firmware"},{"vendor":"hp","product":"eliteone_1000_g2_23.8-in_all-in-one_business_pc_firmware"},{"vendor":"hp","product":"eliteone_1000_g2_23.8-in_touch_all-in-one_business_pc_firmware"},{"vendor":"hp","product":"eliteone_1000_g2_27-in_4k_uhd_all-in-one_business_pc_firmware"},{"vendor":"hp","product":"eliteone_1000_g2_34-in_curved_all-in-one_business_pc_firmware"},{"vendor":"hp","product":"eliteone_800_g4_23.8-in_healthcare_edition_all-in-one_business_pc_firmware"},{"vendor":"hp","product":"eliteone_800_g4_23.8-inch_non-touch_all-in-one_pc_firmware"},{"vendor":"hp","product":"eliteone_800_g4_23.8-inch_non-touch_gpu_all-in-one_pc_firmware"},{"vendor":"hp","product":"eliteone_800_g4_23.8-inch_touch_all-in-one_pc_firmware"},{"vendor":"hp","product":"eliteone_800_g4_23.8-inch_touch_gpu_all-in-one_pc_firmware"},{"vendor":"hp","product":"eliteone_800_g5_23.8-in_healthcare_edition_all-in-one_firmware"},{"vendor":"hp","product":"eliteone_800_g5_23.8-inch_all-in-one_firmware"},{"vendor":"hp","product":"eliteone_800_g6_24_all-in-one_pc_firmware"},{"vendor":"hp","product":"eliteone_800_g6_27_all-in-one_pc_firmware"},{"vendor":"hp","product":"eliteone_800_g8_24_all-in-one_pc_firmware"},{"vendor":"hp","product":"eliteone_800_g8_27_all-in-one_pc_firmware"},{"vendor":"hp","product":"engage_flex_mini_retail_system_firmware"},{"vendor":"hp","product":"mp9_g4_retail_system_firmware"},{"vendor":"hp","product":"probook_430_g5_firmware"},{"vendor":"hp","product":"probook_430_g6_firmware"},{"vendor":"hp","product":"probook_430_g7_firmware"},{"vendor":"hp","product":"probook_430_g8_firmware"},{"vendor":"hp","product":"probook_440_g5_firmware"},{"vendor":"hp","product":"probook_440_g6_firmware"},{"vendor":"hp","product":"probook_440_g7_firmware"},{"vendor":"hp","product":"probook_440_g8_firmware"},{"vendor":"hp","product":"probook_450_g5_firmware"},{"vendor":"hp","product":"probook_450_g6_firmware"},{"vendor":"hp","product":"probook_450_g7_firmware"},{"vendor":"hp","product":"probook_450_g8_firmware"},{"vendor":"hp","product":"probook_470_g5_firmware"},{"vendor":"hp","product":"probook_630_g8_firmware"},{"vendor":"hp","product":"probook_640_g4_firmware"},{"vendor":"hp","product":"probook_640_g5_firmware"},{"vendor":"hp","product":"probook_640_g7_firmware"},{"vendor":"hp","product":"probook_640_g8_firmware"},{"vendor":"hp","product":"probook_650_g4_firmware"},{"vendor":"hp","product":"probook_650_g5_firmware"},{"vendor":"hp","product":"probook_650_g7_firmware"},{"vendor":"hp","product":"probook_650_g8_firmware"},{"vendor":"hp","product":"probook_x360_11_g3_education_edition_firmware"},{"vendor":"hp","product":"probook_x360_11_g4_education_edition_firmware"},{"vendor":"hp","product":"probook_x360_11_g5_education_edition_firmware"},{"vendor":"hp","product":"probook_x360_11_g6_education_edition_firmware"},{"vendor":"hp","product":"probook_x360_11_g7_education_edition_firmware"},{"vendor":"hp","product":"probook_x360_440_g1_firmware"},{"vendor":"hp","product":"prodesk_400_g4_desktop_mini_pc_firmware"},{"vendor":"hp","product":"prodesk_400_g5_desktop_mini_pc_firmware"},{"vendor":"hp","product":"prodesk_400_g5_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_400_g5_small_form_factor_pc_firmware"},{"vendor":"hp","product":"prodesk_400_g6_desktop_mini_pc_firmware"},{"vendor":"hp","product":"prodesk_400_g6_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_400_g6_small_form_factor_pc_firmware"},{"vendor":"hp","product":"prodesk_400_g7_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_400_g7_small_form_factor_pc_firmware"},{"vendor":"hp","product":"prodesk_405_g8_desktop_mini_pc_firmware"},{"vendor":"hp","product":"prodesk_405_g8_small_form_factor_pc_firmware"},{"vendor":"hp","product":"prodesk_480_g5_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_480_g6_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_480_g7_pci_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_600_g4_desktop_mini_pc_firmware"},{"vendor":"hp","product":"prodesk_600_g4_microtower_pc\\(with_pci_slot\\)_firmware"},{"vendor":"hp","product":"prodesk_600_g4_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_600_g4_small_form_factor_pc_firmware"},{"vendor":"hp","product":"prodesk_600_g5_desktop_mini_pc_firmware"},{"vendor":"hp","product":"prodesk_600_g5_microtower_pc\\(with_pci_slot\\)_firmware"},{"vendor":"hp","product":"prodesk_600_g5_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_600_g5_small_form_factor_pc_firmware"},{"vendor":"hp","product":"prodesk_600_g6_desktop_mini_pc_firmware"},{"vendor":"hp","product":"prodesk_600_g6_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_600_g6_small_form_factor_pc_firmware"},{"vendor":"hp","product":"prodesk_680_g4_microtower_pc\\(with_pci_slot\\)_firmware"},{"vendor":"hp","product":"prodesk_680_g4_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_680_g6_pci_microtower_pc_firmware"},{"vendor":"hp","product":"proone_400_g4_20-inch_non-touch_all-in-one_business_pc_firmware"},{"vendor":"hp","product":"proone_400_g4_23.8-inch_non-touch_all-in-one_business_pc_firmware"},{"vendor":"hp","product":"proone_400_g5_20-inch_all-in-one_business_pc_firmware"},{"vendor":"hp","product":"proone_400_g5_23.8-inch_all-in-one_business_pc_firmware"},{"vendor":"hp","product":"proone_400_g6_20_all-in-one_pc_firmware"},{"vendor":"hp","product":"proone_400_g6_24_all-in-one_pc_firmware"},{"vendor":"hp","product":"proone_440_g4_23.8-inch_non-touch_all-in-one_business_pc_firmware"},{"vendor":"hp","product":"proone_440_g5_23.8-in_all-in-one_business_pc_firmware"},{"vendor":"hp","product":"proone_440_g6_24_all-in-one_pc_firmware"},{"vendor":"hp","product":"proone_600_g4_21.5-inch_touch_all-in-one_business_pc_firmware"},{"vendor":"hp","product":"proone_600_g5_21.5-in_all-in-one_business_pc_firmware"},{"vendor":"hp","product":"proone_600_g6_22_all-in-one_pc_firmware"},{"vendor":"hp","product":"z1_entry_tower_g5_workstation_firmware"},{"vendor":"hp","product":"z1_entry_tower_g6_workstation_firmware"},{"vendor":"hp","product":"z1_g8_tower_desktop_pc_firmware"},{"vendor":"hp","product":"z4_g4_workstation_\\(core-x\\)_firmware"},{"vendor":"hp","product":"z4_g4_workstation_\\(xeon_w\\)_firmware"},{"vendor":"hp","product":"z6_g4_workstation_firmware"},{"vendor":"hp","product":"z8_g4_workstation_firmware"},{"vendor":"hp","product":"zbook_14u_g5_firmware"},{"vendor":"hp","product":"zbook_14u_g6_firmware"},{"vendor":"hp","product":"zbook_15_g5_firmware"},{"vendor":"hp","product":"zbook_15_g6_firmware"},{"vendor":"hp","product":"zbook_15u_g5_firmware"},{"vendor":"hp","product":"zbook_15u_g6_firmware"},{"vendor":"hp","product":"zbook_17_g5_firmware"},{"vendor":"hp","product":"zbook_17_g6_firmware"},{"vendor":"hp","product":"zbook_create_g7_firmware"},{"vendor":"hp","product":"zbook_firefly_14_g7_firmware"},{"vendor":"hp","product":"zbook_firefly_14_g8_firmware"},{"vendor":"hp","product":"zbook_firefly_15_g7_firmware"},{"vendor":"hp","product":"zbook_firefly_15_g8_firmware"},{"vendor":"hp","product":"zbook_fury_15_g7_firmware"},{"vendor":"hp","product":"zbook_fury_15_g8_firmware"},{"vendor":"hp","product":"zbook_fury_17_g7_firmware"},{"vendor":"hp","product":"zbook_fury_17_g8_firmware"},{"vendor":"hp","product":"zbook_power_15_g8_firmware"},{"vendor":"hp","product":"zbook_power_g7_firmware"},{"vendor":"hp","product":"zbook_studio_15_g8_firmware"},{"vendor":"hp","product":"zbook_studio_g5_firmware"},{"vendor":"hp","product":"zbook_studio_g7_firmware"},{"vendor":"hp","product":"zbook_studio_x360_g5_firmware"},{"vendor":"hp","product":"zhan_66_pro_13_g2_firmware"},{"vendor":"hp","product":"zhan_66_pro_14_g2_firmware"},{"vendor":"hp","product":"zhan_66_pro_14_g3_firmware"},{"vendor":"hp","product":"zhan_66_pro_14_g4_firmware"},{"vendor":"hp","product":"zhan_66_pro_15_g2_firmware"},{"vendor":"hp","product":"zhan_66_pro_15_g3_firmware"},{"vendor":"hp","product":"zhan_66_pro_g1_firmware"},{"vendor":"hp","product":"zhan_66_pro_g3_22_all-in-one_pc_firmware"},{"vendor":"hp","product":"zhan_66_pro_g3_24_all-in-one_pc_firmware"},{"vendor":"hp","product":"zhan_x_13_g2_firmware"}],"references":[{"url":"https://support.hp.com/us-en/document/ish_5661066-5661090-16","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-39299"},{"url":"https://github.com/advisories/GHSA-6cjf-94vf-f544"}],"sources":{"cve":[{"id":"CVE-2021-39299","description":"Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.","status":"published","published":"2022-02-16T16:38:13Z","modified":"2026-10-07T18:09:14.444Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:33:09.175141Z"}],"euvd":[{"id":"EUVD-2021-25660","description":"Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.","status":"published","published":"2022-02-16T16:38:13Z","modified":"2026-10-07T18:09:14Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:34.353796Z"}],"ghsa":[{"id":"GHSA-6cjf-94vf-f544","title":"Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which...","description":"Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.","status":"published","published":"2022-02-17T00:00:32Z","modified":"2026-10-07T21:31:22Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:12:55.347665Z"}],"nvd":[{"id":"CVE-2021-39299","description":"Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.","status":"published","published":"2022-02-16T17:15:10.92Z","modified":"2026-10-07T19:17:29.177Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:07:04.6896Z"}]}}