BIOS TOCTOU Vulnerabilities in HP PC Products: Risk of Code Execution, Privilege Escalation, DoS, and Information Disclosure

CVE-2022-31638 · HIGH Severity

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.

Learn more about our Cis Benchmark Audit For Apple Ios.