CVE-2021-39299

State: Published
Severity: 7.8 High
Published: Feb 16, 2022
Updated: Oct 7, 2026
Reserved: Aug 19, 2021

Description

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-269 Improper Privilege Management

Affected Products

Product	Versions
BUSINESS NOTEBOOK PCS BIOS; BUSINESS DESKTOP PCS BIOS; RETAIL POINT-OF-SALE SYSTEMS BIOS; WORKSTATIONS BIOSn/a	before 01.12.00Affected before 01.08.00Affected before 01.19.00Affected before 01.08.02Affected before 01.08.01Affected before 02.17.00Affected before 02.18.00Affected before 02.12.00Affected before 02.10.00Affected before 02.07.00Affected before 02.03.00Affected before 02.75Affected before 2.58Affected

References

https://support.hp.com/us-en/document/ish_5661066-5661090-16

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.