{"id":"CVE-2022-37018","aliases":["EUVD-2022-39675","GHSA-vv23-8mw3-7r7r"],"status":"published","title":"A potential vulnerability has been identified in the system BIOS for certain HP PC products which...","description":"A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.","severity":{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00246,"percentile":0.15946,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276"],"published":"2022-11-21T21:02:37Z","modified":"2026-06-17T04:54:28Z","products":[{"vendor":"hp","product":"elite_slice_firmware"},{"vendor":"hp","product":"elite_x2_1012_g1_firmware"},{"vendor":"hp","product":"elite_x2_1012_g2_firmware"},{"vendor":"hp","product":"elitebook_1030_g1_firmware"},{"vendor":"hp","product":"elitebook_1040_g3_firmware"},{"vendor":"hp","product":"elitebook_1040_g4_firmware"},{"vendor":"hp","product":"elitebook_820_g3_firmware"},{"vendor":"hp","product":"elitebook_820_g4_firmware"},{"vendor":"hp","product":"elitebook_828_g3_firmware"},{"vendor":"hp","product":"elitebook_828_g4_firmware"},{"vendor":"hp","product":"elitebook_840_g3_firmware"},{"vendor":"hp","product":"elitebook_840_g4_firmware"},{"vendor":"hp","product":"elitebook_848_g3_firmware"},{"vendor":"hp","product":"elitebook_848_g4_firmware"},{"vendor":"hp","product":"elitebook_850_g3_firmware"},{"vendor":"hp","product":"elitebook_850_g4_firmware"},{"vendor":"hp","product":"elitebook_folio_g1_firmware"},{"vendor":"hp","product":"elitebook_x360_1020_g2_firmware"},{"vendor":"hp","product":"elitebook_x360_1030_g2_firmware"},{"vendor":"hp","product":"elitedesk_800_35w_g2_desktop_mini_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_35w_g3_desktop_mini_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_65w_g2_desktop_mini_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_65w_g3_desktop_mini_pc_firmware"},{"vendor":"hp","product":"elitedesk_800_g2_sff_firmware"},{"vendor":"hp","product":"eliteone_800_g2_aio_firmware"},{"vendor":"hp","product":"eliteone_800_g3_firmware"},{"vendor":"hp","product":"engage_one_aio_system_firmware"},{"vendor":"hp","product":"mp9_g2_retail_system_firmware"},{"vendor":"hp","product":"pro_x2_612_g2_firmware"},{"vendor":"hp","product":"probook_11_g2_firmware"},{"vendor":"hp","product":"probook_430_g4_firmware"},{"vendor":"hp","product":"probook_440_g3_firmware"},{"vendor":"hp","product":"probook_440_g4_firmware"},{"vendor":"hp","product":"probook_446_g3_firmware"},{"vendor":"hp","product":"probook_450_g4_firmware"},{"vendor":"hp","product":"probook_470_g3_firmware"},{"vendor":"hp","product":"probook_470_g4_firmware"},{"vendor":"hp","product":"probook_640_g2_firmware"},{"vendor":"hp","product":"probook_640_g3_firmware"},{"vendor":"hp","product":"probook_650_g2_firmware"},{"vendor":"hp","product":"probook_650_g3_firmware"},{"vendor":"hp","product":"probook_x360_11_g2_firmware"},{"vendor":"hp","product":"prodesk_400_g3_dm_firmware"},{"vendor":"hp","product":"prodesk_400_g4_microtower_firmware"},{"vendor":"hp","product":"prodesk_400_g4_sff_firmware"},{"vendor":"hp","product":"prodesk_480_g4_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_600_g2_dm_firmware"},{"vendor":"hp","product":"prodesk_600_g2_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_600_g2_sff_firmware"},{"vendor":"hp","product":"prodesk_600_g3_desktop_mini_firmware"},{"vendor":"hp","product":"prodesk_600_g3_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_600_g3_sff_firmware"},{"vendor":"hp","product":"prodesk_680_g2_microtower_pc_firmware"},{"vendor":"hp","product":"prodesk_680_g3_microtower_pc_firmware"},{"vendor":"hp","product":"proone_400_g2_aio_firmware"},{"vendor":"hp","product":"proone_400_g3_aio_firmware"},{"vendor":"hp","product":"proone_480_g3_firmware"},{"vendor":"hp","product":"proone_600_g2_aio_firmware"},{"vendor":"hp","product":"proone_600_g3_firmware"},{"vendor":"hp","product":"rp9_g1_retail_system_firmware"},{"vendor":"hp","product":"z1_g3_firmware"},{"vendor":"hp","product":"z238_microtower_firmware"},{"vendor":"hp","product":"z240_sff_firmware"},{"vendor":"hp","product":"z240_tower_firmware"},{"vendor":"hp","product":"z2_mini_g3_firmware"},{"vendor":"hp","product":"zbook_14u_g4_firmware"},{"vendor":"hp","product":"zbook_15_g3_firmware"},{"vendor":"hp","product":"zbook_15_g4_firmware"},{"vendor":"hp","product":"zbook_15u_g3_firmware"},{"vendor":"hp","product":"zbook_15u_g4_firmware"},{"vendor":"hp","product":"zbook_17_g3_firmware"},{"vendor":"hp","product":"zbook_17_g4_firmware"},{"vendor":"hp","product":"zbook_studio_g3_firmware"},{"vendor":"hp","product":"zbook_studio_g4_firmware"},{"vendor":"hp","product":"zbook_studio_x2_g4_firmware"},{"vendor":"hp inc.","product":"hp pc bios"}],"references":[{"url":"https://support.hp.com/us-en/document/ish_7191946-7191970-16/hpsbhf03820","tags":["x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37018"},{"url":"https://github.com/advisories/GHSA-vv23-8mw3-7r7r"}],"sources":{"cve":[{"id":"CVE-2022-37018","description":"A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.","status":"published","published":"2022-11-21T21:02:37.037Z","modified":"2025-04-29T04:48:11.747Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:34:26.977054Z"}],"euvd":[{"id":"EUVD-2022-39675","description":"A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.","status":"published","published":"2022-11-21T21:02:37Z","modified":"2025-04-29T04:48:11Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:00.974547Z"}],"ghsa":[{"id":"GHSA-vv23-8mw3-7r7r","title":"A potential vulnerability has been identified in the system BIOS for certain HP PC products which...","description":"A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.","status":"published","published":"2022-12-12T15:30:32Z","modified":"2025-04-29T06:31:39Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T15:02:03.587511Z"}],"nvd":[{"id":"CVE-2022-37018","description":"A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.","status":"published","published":"2022-12-12T13:15:12.44Z","modified":"2026-06-17T04:54:28.52Z","cvss":[{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:07:33.239526Z"}]}}