CVE-2022-38395: HP Fusion

High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days.

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.

Affected products

• HP Fusion: before 1.38.2601.0 (fixed in 1.38.2601.0)
• HP Support Assistant: before 9.11 (fixed in 9.11)

Published 2022-12-12. Last modified 2026-06-17.