CVE-2022-38396: Microsoft Windows 10 1507

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via execution of certain files outside the restricted path. This potential vulnerability was remediated starting with Windows 10 versions 21H2 on October 31, 2021.

Affected products

• Microsoft Windows 10 1507: affected versions not specified
• Microsoft Windows 10 1511: affected versions not specified
• Microsoft Windows 10 1607: affected versions not specified
• Microsoft Windows 10 1703: affected versions not specified
• Microsoft Windows 10 1709: affected versions not specified
• Microsoft Windows 10 1803: affected versions not specified
• Microsoft Windows 10 1809: affected versions not specified
• Microsoft Windows 10 1909: affected versions not specified
• Microsoft Windows 10 2004: affected versions not specified
• Microsoft Windows 10 20h2: affected versions not specified

Published 2023-02-12. Last modified 2026-06-17.