CVE-2022-27540: HP Dragonfly Folio 13.5 Inch g3 2-In-1 Notebook Pc Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.

Affected products

• HP Dragonfly Folio 13.5 Inch g3 2-In-1 Notebook Pc Firmware: before 01.07.00 (fixed in 01.07.00)
• HP Elite Dragonfly 13.5 Inch g3 Notebook Pc Firmware: before 01.07.00 (fixed in 01.07.00)
• HP Elite Dragonfly Firmware: before 01.26.00 (fixed in 01.26.00)
• HP Elite Dragonfly g2 Firmware: before 01.11.00 (fixed in 01.11.00)
• HP Elite Dragonfly Max Firmware: before 01.11.00 (fixed in 01.11.00)
• HP Elite Mini 600 g9 Desktop Pc Firmware: before 02.10.04 (fixed in 02.10.04)
• HP Elite Mini 800 g9 Desktop Pc Firmware: before 02.10.04 (fixed in 02.10.04)
• HP Elite MT645 g7 Mobile Thin Client Firmware: before 01.10.01 (fixed in 01.10.01)
• HP Elite Sff 600 g9 Desktop Pc Firmware: before 02.10.05 (fixed in 02.10.05)
• HP Elite Sff 800 g9 Desktop Pc Firmware: before 02.10.05 (fixed in 02.10.05)
• HP Elite Slice g2 - Audio Ready With Zoom Rooms Firmware: before 2.64 (fixed in 2.64)
• HP Elite Slice g2 - Partner Ready With Microsoft Teams Rooms Firmware: before 2.64 (fixed in 2.64)
• HP Elite Slice g2 With Intel Unite Firmware: before 2.64 (fixed in 2.64)
• HP Elite Slice g2 With Microsoft Teams Rooms Firmware: before 2.64 (fixed in 2.64)
• HP Elite Slice g2 With Zoom Rooms Firmware: before 2.64 (fixed in 2.64)
• HP Elite Tower 600 g9 Desktop Pc Firmware: before 02.10.05 (fixed in 02.10.05)
• HP Elite Tower 680 g9 Desktop Pc Firmware: before 02.10.05 (fixed in 02.10.05)
• HP Elite Tower 800 g9 Desktop Pc Firmware: before 02.10.05 (fixed in 02.10.05)
• HP Elite Tower 880 g9 Desktop Pc Firmware: before 02.10.05 (fixed in 02.10.05)
• HP Elite x2 1012 g1 Firmware: before 1.6 (fixed in 1.6)
• HP Elite x2 1012 g1 Tablet Firmware: version 1.6 only
• HP Elite x2 1012 g1 Tablet With Travel Keyboard Firmware: version 1.6 only
• HP Elite x2 1012 g2 Firmware: version 1.48 only
• HP Elite x2 1013 g3 Firmware: version 01.28.00 only
• HP Elite x2 g4 Firmware: version 01.26.0 only
• and 328 more

Published 2024-06-28. Last modified 2026-06-17.