CVE-2022-31635

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-367

Affected software

No affected versions have been published.

Timeline

Published
Jun 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-316367.8Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allCVE-2022-316377.8Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allCVE-2022-316387.8Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allCVE-2022-316397.8Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allCVE-2022-316407.0Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escCVE-2022-316417.0Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escCVE-2022-316427.0Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escCVE-2022-316435.5A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP iCVE-2022-316447.8Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escCVE-2022-316457.8Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escCVE-2022-316467.8Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escCVE-2022-316477.1Docker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv/destroy dockerBackendV2 API via a symlink in t
CVE-2022-31635: High severity, CVSS 7.8 | Vulnix