High severity7.8NVD Advisory· Published Dec 12, 2022· Updated Jun 17, 2026

CVE-2022-38395

Description

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up.

Affected products

Microfocus/Fusion
cpe:2.3:a:hp:fusion:*:*:*:*:*:*:*:*
Range: <1.38.2601.0
Microfocus/Support Assistant
cpe:2.3:a:hp:support_assistant:*:*:*:*:*:*:*:*
Range: <9.11
Microfocus/HP Support Assistantllm-create
HP Inc./HP Support Assistantv5
Range: See HP Security Bulletin reference for affected versions.

Patches

Vulnerability mechanics

References

support.hp.com/us-en/document/ish_6788123-6788147-16/hpsbhf03809nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000