5.8
Medium
CVE-2025-10578 HP Support Assistant - Potential Escalation of Privilege
Description
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.
CVSS 4.0 detail
Vector CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:NExploitable with local access to the machine, with an ordinary account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Local
- Attack complexity
- Low
- Attack requirements
- Present
- Privileges required
- Low
- Interaction
- None
- Confidentiality
- Low
- Integrity
- Low
- Availability
- High
- Confidentiality of other systems
- None
- Integrity of other systems
- None
- Availability of other systems
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Support Assistant | Versions not published |
Other CVEs of HP Support Assistant
The 8 CVEs of HP Support Assistant →
CVE-2026-15431
A potential security vulnerability has been identified in the HP Support
Assistant for versions prior to 9.53.2.0
7.3
High
CVE-2025-43019
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to…
5.8
Medium
CVE-2022-23455
Potential security vulnerabilities have been identified in HP Support Assistant
7.8
High
CVE-2022-23454
Potential security vulnerabilities have been identified in HP Support Assistant
7.8
High