CVE-2022-38396 - CVE House
Back to Database
Status published Unknown CVE-2022-38396

HP Factory Preinstalled Images on certain systems that shipped with...

Vulnerability Description

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on October 31, 2021.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-38396

Credits & Attribution

No credits recorded in the NVD database.

References

More from HP Inc.

View All →
CVE-2025-43489
Poly Clariti Manager - Multiple Security Vulnerabilities
Low 2
CVE-2025-43488
Poly Clariti Manager - Multiple Security Vulnerabilities
Low 2
CVE-2025-43487
Poly Clariti Manager - Multiple Security Vulnerabilities
Medium 6.9
CVE-2025-43486
Poly Clariti Manager - Multiple Security Vulnerabilities
Medium 5.7
CVE-2025-43485
Poly Clariti Manager - Multiple Security Vulnerabilities
Medium 5.7

Affected Vendor

Affected Software

HP Factory Preinstalled Windows 10 20H2 Images
Vulnerable Versions:
See HP Security Bulletin reference for affected versions.

Timeline

Official Publish: February 3rd, 2023
Last Modified: March 25th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.