CVE-2024-27458

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Oct 7, 2024
CWE ID 59

Summary

CVE-2024-27458 is a newly identified privilege escalation vulnerability affecting HP Hotkey Support software. This issue could potentially allow local attackers to escalate their privileges, posing a security risk. HP urges users of HP Programmable Key to update their HP Hotkey Support software to mitigate this vulnerability. The vulnerability itself enables attackers to exploit a weakness in the software, escalating their privileges beyond intended levels. HP is releasing a patch to address the issue and strongly encourages users to apply the update promptly to safeguard their systems.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share