CVE-2022-37018: HP Elite Slice Firmware

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability.

Affected products

HP Elite Slice Firmware: before 02.59 (fixed in 02.59)
HP Elite x2 1012 g1 Firmware: before 01.58 (fixed in 01.58)
HP Elite x2 1012 g2 Firmware: before 01.44 (fixed in 01.44)
HP Elitebook 1030 g1 Firmware: before 01.58 (fixed in 01.58)
HP Elitebook 1040 g3 Firmware: before 01.58 (fixed in 01.58)
HP Elitebook 1040 g4 Firmware: before 01.44 (fixed in 01.44)
HP Elitebook 820 g3 Firmware: before 01.58 (fixed in 01.58)
HP Elitebook 820 g4 Firmware: before 01.44 (fixed in 01.44)
HP Elitebook 828 g3 Firmware: before 01.58 (fixed in 01.58)
HP Elitebook 828 g4 Firmware: before 01.44 (fixed in 01.44)
HP Elitebook 840 g3 Firmware: before 01.58 (fixed in 01.58)
HP Elitebook 840 g4 Firmware: before 01.44 (fixed in 01.44)
HP Elitebook 848 g3 Firmware: before 01.58 (fixed in 01.58)
HP Elitebook 848 g4 Firmware: before 01.44 (fixed in 01.44)
HP Elitebook 850 g3 Firmware: before 01.58 (fixed in 01.58)
HP Elitebook 850 g4 Firmware: before 01.44 (fixed in 01.44)
HP Elitebook Folio g1 Firmware: before 01.58 (fixed in 01.58)
HP Elitebook x360 1020 g2 Firmware: before 01.44 (fixed in 01.44)
HP Elitebook x360 1030 g2 Firmware: before 01.44 (fixed in 01.44)
HP Elitedesk 800 35w g2 Desktop Mini Pc Firmware: before 02.59 (fixed in 02.59)
HP Elitedesk 800 35w g3 Desktop Mini Pc Firmware: before 02.44 (fixed in 02.44)
HP Elitedesk 800 65w g2 Desktop Mini Pc Firmware: before 02.59 (fixed in 02.59)
HP Elitedesk 800 65w g3 Desktop Mini Pc Firmware: before 02.44 (fixed in 02.44)
HP Elitedesk 800 g2 Sff Firmware: before 02.59 (fixed in 02.59)
HP Eliteone 800 g2 Aio Firmware: before 02.59 (fixed in 02.59)
and 50 more

Published 2022-12-12. Last modified 2026-06-17.