Executive brief
HP Support Assistant, a system utility that provides technical support and driver management for HP devices, contains a local privilege escalation vulnerability caused by insufficient access controls. A local attacker could exploit this weakness to gain elevated system privileges, potentially leading to full system compromise and unauthorized access to sensitive data.
Technical details
The vulnerability stems from insufficient access controls in HP Support Assistant versions prior to 9.55.10.0, allowing local privilege escalation. An attacker with local access can exploit this flaw to elevate their privileges on the affected system. The attack vector is local and does not require network access or user interaction beyond initial system access.
Affected products
- HP Support Assistant prior to 9.55.10.0
Timeline
- 2026-09-22: disclosed