HP Support Assistant vulnerabilities

19 CVEs affecting HP Support Assistant, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-10578, published 2025-10-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-2245, published 2016-03-19. Critical severity, CVSS 9.8. EPSS: 5.9% chance of exploitation in the next 30 days. HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors.
CVE-2022-38395, published 2022-12-12. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking…
CVE-2019-6329, published 2019-06-25. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328.
CVE-2020-6922, published 2022-02-16. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6921, published 2022-02-16. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6919, published 2022-02-16. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6918, published 2022-02-16. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6917, published 2022-02-16. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2020-6920, published 2022-02-16. Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days. Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
CVE-2019-6328, published 2019-06-25. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329.

Latest

CVE-2025-10578, published 2025-10-01. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges…
CVE-2025-43019, published 2025-07-08. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion.
CVE-2025-43026, published 2025-06-05. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges…
CVE-2022-23455, published 2023-02-01. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted…
CVE-2022-23454, published 2023-02-01. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted…
CVE-2022-23453, published 2023-02-01. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted…