CVE-2025-10578
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.
Risk Assessment
A local attacker can gain elevated privileges, potentially leading to system takeover. This may result in unauthorized data access and further compromise.
Recommendation
Update HP Support Assistant to version 9.47.41.0 or later. Restrict local access to trusted users.
Other vulnerabilities in HP Support Assistant
See all- CVE-2016-2245Critical
HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors.
- CVE-2026-19915High
Potential vulnerability in HP Support Assistant prior to version 9.55.10.0. Insufficient access controls could allow a local attacker to escalate privileges.
- CVE-2026-15431High
A potential security vulnerability in HP Support Assistant for versions prior to 9.53.2.0 could allow a local attacker to escalate privileges due to insufficient access controls.
- CVE-2020-6922High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6921High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6920Medium
Potential security vulnerabilities including compromise of integrity and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6919High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6918High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2020-6917High
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients have been identified in HP Support Assistant software.
- CVE-2022-23456Medium
A potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software. The vulnerability could be exploited by an attacker to delete files on the victim's system.
Original NVD description (English source)
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS