High Privilege escalation

CVE-2021-39299 — Improper Privilege Management in Hp 260 G3 Desktop Mini Pc Firmware

Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

Published Feb 16, 2022 · Updated Oct 13, 2026 · Sources: NIST National Vulnerability Database, CVE Program (cve.org) e CISA ADP · CNA: hp

Low

Who exploits it and how urgent it is

A 0–100 score combining confirmed exploitation, ransomware and APT use, public exploits, EPSS and severity.

No exploitation signal in the sources consulted so far.

How the score was calculated

EPSS 0.4% (30-day exploitation probability)+4
Technical severity (high)+6

The score orders the patch queue; it does not replace your asset context (internet exposure, criticality, compensating controls).

Triage

Is it exploited, how likely is exploitation, what does it touch, and how severe do the sources call it.

Exploitation

Not confirmed

Not in CISA KEV — an absence of record, not proof it is unexploited.

EPSS FIRST

0.37%

ahead of 29% of scored CVEs · Oct 15, 2026

Affects

260 G3 Desktop Mini Pc Firmware and 186 more

CVSS base

8.8

High · 3 source(s)

CISA SSVC assessment CISA

Three decision points CISA publishes for the CVEs it assesses (SSVC 2.0.3). A stakeholder decision, not a severity score.

Exploitation

None

none · proof-of-concept · active

Automatable

can an attacker script the kill-chain steps

Technical impact

Total

partial · total control of the vulnerable component

Remediation

Fixes and mitigations documented by the sources — linked to the original advisory.

Documented patch — support.hp.com (NIST National Vulnerability Database)

First 24 hours

Ordered from the record’s own fields — exposure first, because you cannot patch what you have not found. A rule-generated starting point.

Identify exposed assets running the affected vendor/product/version combinations (Hp 260 G3 Desktop Mini Pc Firmware, Hp Elite Dragonfly Firmware, Hp Elite Dragonfly G2 Firmware…).
Apply the fixed version or the patch documented under Remediation.
Search available logs for exploit probes matching the vulnerability class (privilege escalation), errors and authentication anomalies.

Affected scope

Vendor, product and versions as the sources word them.

Vendor	Product	Versions	Status	Source
Hp	260 G3 Desktop Mini Pc Firmware	≤ 2.17.00	Vulnerable	NIST National Vulnerability Database
Hp	Elite Dragonfly Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elite Dragonfly G2 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elite Dragonfly Max Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elite X2 1013 G3 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Elite X2 G4 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elite X2 G8 Tablet Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 1050 G1 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 830 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 830 G6 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 830 G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 830 G8 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 836 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 836 G6 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 840 Aero G8 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 840 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 840 G5 Healthcare Edition Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 840 G6 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 840 G6 Healthcare Edition Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 840 G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 840 G8 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 840r G4 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 846 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 850 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 850 G6 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 850 G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook 850 G8 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook X360 1030 G3 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook X360 1030 G4 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook X360 1030 G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook X360 1030 G8 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook X360 1040 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook X360 1040 G6 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook X360 1040 G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook X360 1040 G8 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook X360 830 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook X360 830 G6 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook X360 830 G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitebook X360 830 G8 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 35w G4 Desktop Mini Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 65w G4 Desktop Mini Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 95w G4 Desktop Mini Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 G4 Small Form Factor Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 G4 Tower Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 G4 Workstation Edition Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 G5 Desktop Mini Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 G5 Small Form Factor Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 G5 Tower Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 G6 Desktop Mini Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 G6 Small Form Factor Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 G6 Tower Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 G8 Desktop Mini Pc Firmware	≤ 2.07.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 G8 Small Form Factor Pc Firmware	≤ 2.07.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 800 G8 Tower Pc Firmware	≤ 2.07.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 805 G6 Desktop Mini Pc Firmware	≤ 2.07.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 805 G6 Small Form Factor Pc Firmware	≤ 2.07.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 805 G8 Desktop Mini Pc Firmware	≤ 2.03.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 805 G8 Small Form Factor Pc Firmware	≤ 2.03.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 880 G4 Tower Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 880 G5 Tower Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 880 G6 Tower Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Elitedesk 880 G8 Tower Pc Firmware	≤ 2.07.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 1000 G2 23.8-in All-in-one Business Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 1000 G2 23.8-in Touch All-in-one Business Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 1000 G2 27-in 4k Uhd All-in-one Business Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 1000 G2 34-in Curved All-in-one Business Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 800 G4 23.8-in Healthcare Edition All-in-one Business Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 800 G4 23.8-inch Non-touch All-in-one Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 800 G4 23.8-inch Non-touch Gpu All-in-one Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 800 G4 23.8-inch Touch All-in-one Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 800 G4 23.8-inch Touch Gpu All-in-one Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 800 G5 23.8-in Healthcare Edition All-in-one Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 800 G5 23.8-inch All-in-one Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 800 G6 24 All-in-one Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 800 G6 27 All-in-one Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 800 G8 24 All-in-one Pc Firmware	≤ 2.07.00	Vulnerable	NIST National Vulnerability Database
Hp	Eliteone 800 G8 27 All-in-one Pc Firmware	≤ 2.07.00	Vulnerable	NIST National Vulnerability Database
Hp	Engage Flex Mini Retail System Firmware	< 02.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Mp9 G4 Retail System Firmware	< 02.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 430 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 430 G6 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 430 G7 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 430 G8 Firmware	< 01.08.02	Vulnerable	NIST National Vulnerability Database
Hp	Probook 440 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 440 G6 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 440 G7 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 440 G8 Firmware	< 01.08.02	Vulnerable	NIST National Vulnerability Database
Hp	Probook 450 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 450 G6 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 450 G7 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 450 G8 Firmware	< 01.08.02	Vulnerable	NIST National Vulnerability Database
Hp	Probook 470 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 630 G8 Firmware	< 01.08.01	Vulnerable	NIST National Vulnerability Database
Hp	Probook 640 G4 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 640 G5 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 640 G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 640 G8 Firmware	< 01.08.01	Vulnerable	NIST National Vulnerability Database
Hp	Probook 650 G4 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 650 G5 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 650 G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook 650 G8 Firmware	< 01.08.01	Vulnerable	NIST National Vulnerability Database
Hp	Probook X360 11 G3 Education Edition Firmware	< 01.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook X360 11 G4 Education Edition Firmware	< 01.13.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook X360 11 G5 Education Edition Firmware	< 01.09.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook X360 11 G6 Education Edition Firmware	< 01.09.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook X360 11 G7 Education Edition Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Probook X360 440 G1 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 400 G4 Desktop Mini Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 400 G5 Desktop Mini Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 400 G5 Microtower Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 400 G5 Small Form Factor Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 400 G6 Desktop Mini Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 400 G6 Microtower Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 400 G6 Small Form Factor Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 400 G7 Microtower Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 400 G7 Small Form Factor Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 405 G8 Desktop Mini Pc Firmware	≤ 2.03.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 405 G8 Small Form Factor Pc Firmware	≤ 2.03.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 480 G5 Microtower Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 480 G6 Microtower Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 480 G7 Pci Microtower Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 600 G4 Desktop Mini Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 600 G4 Microtower Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 600 G4 Microtower Pc(with Pci Slot) Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 600 G4 Small Form Factor Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 600 G5 Desktop Mini Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 600 G5 Microtower Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 600 G5 Microtower Pc(with Pci Slot) Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 600 G5 Small Form Factor Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 600 G6 Desktop Mini Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 600 G6 Microtower Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 600 G6 Small Form Factor Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 680 G4 Microtower Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 680 G4 Microtower Pc(with Pci Slot) Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Prodesk 680 G6 Pci Microtower Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Proone 400 G4 20-inch Non-touch All-in-one Business Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Proone 400 G4 23.8-inch Non-touch All-in-one Business Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Proone 400 G5 20-inch All-in-one Business Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Proone 400 G5 23.8-inch All-in-one Business Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Proone 400 G6 20 All-in-one Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Proone 400 G6 24 All-in-one Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Proone 440 G4 23.8-inch Non-touch All-in-one Business Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Proone 440 G5 23.8-in All-in-one Business Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Proone 440 G6 24 All-in-one Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Proone 600 G4 21.5-inch Touch All-in-one Business Pc Firmware	≤ 2.18.00	Vulnerable	NIST National Vulnerability Database
Hp	Proone 600 G5 21.5-in All-in-one Business Pc Firmware	≤ 2.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Proone 600 G6 22 All-in-one Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Z1 Entry Tower G5 Workstation Firmware	< 02.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Z1 Entry Tower G6 Workstation Firmware	< 02.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Z1 G8 Tower Desktop Pc Firmware	< 02.07.00	Vulnerable	NIST National Vulnerability Database
Hp	Z4 G4 Workstation (core-x) Firmware	< 02.75	Vulnerable	NIST National Vulnerability Database
Hp	Z4 G4 Workstation (xeon W) Firmware	< 02.75	Vulnerable	NIST National Vulnerability Database
Hp	Z6 G4 Workstation Firmware	< 02.75	Vulnerable	NIST National Vulnerability Database
Hp	Z8 G4 Workstation Firmware	< 02.75	Vulnerable	NIST National Vulnerability Database
Hp	Zbook 14u G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook 14u G6 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook 15 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook 15 G6 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook 15u G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook 15u G6 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook 17 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook 17 G6 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Create G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Firefly 14 G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Firefly 14 G8 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Firefly 15 G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Firefly 15 G8 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Fury 15 G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Fury 15 G8 Firmware	< 01.08.01	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Fury 17 G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Fury 17 G8 Firmware	< 01.08.01	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Power 15 G8 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Power G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Studio 15 G8 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Studio G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Studio G7 Firmware	< 01.08.00	Vulnerable	NIST National Vulnerability Database
Hp	Zbook Studio X360 G5 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Zhan 66 Pro 13 G2 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Zhan 66 Pro 14 G2 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Zhan 66 Pro 14 G3 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Zhan 66 Pro 14 G4 Firmware	< 01.08.02	Vulnerable	NIST National Vulnerability Database
Hp	Zhan 66 Pro 15 G2 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Zhan 66 Pro 15 G3 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database
Hp	Zhan 66 Pro G1 Firmware	< 01.19.00	Vulnerable	NIST National Vulnerability Database
Hp	Zhan 66 Pro G3 22 All-in-one Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Zhan 66 Pro G3 24 All-in-one Pc Firmware	≤ 2.10.00	Vulnerable	NIST National Vulnerability Database
Hp	Zhan X 13 G2 Firmware	< 01.12.00	Vulnerable	NIST National Vulnerability Database

Attack characteristics

The CVSS vector, decoded. It describes the attack, not your exposure to it.

Attack vector

Local

Attack complexity

Low

Privileges required

Low

User interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Every base score collected

Sources score independently and may disagree; each row says who scored it and under which version.

Score	Version	Severity	Expl.	Impact	Scored by
8.8	CVSS 3.1	High	2.0	6.0	nvd@nist.gov via NIST National Vulnerability Database
7.8	CVSS 3.1	High	1.8	5.9	134c704f-9b21-4f2e-91b3-4a467353bcc0 via NIST National Vulnerability Database
7.8	CVSS 3.1	High	—	—	CISA-ADP via CVE Program (cve.org) e CISA ADP
7.2	CVSS 2.0	High	3.9	10.0	nvd@nist.gov via NIST National Vulnerability Database

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H (score shown at the top: nvd@nist.gov)

Scoring entities (NIST, CNA, ADP) score independently; each score is shown with its origin. For prioritization we use 8.8 (NVD (NIST)) as a conservative provisional reference — not a definitive official score.

Weakness MITRE

Weakness class according to MITRE’s CWE catalog.

CWE-269 · Improper Privilege Management

Other CVEs with this weakness →

EPSS over time FIRST

Oct 13, 2026 → Oct 15, 2026 · 3 reading(s) · max 0.37%

Detection

Read off the CVSS vector and the weakness class. Starting points, not tested rules.

Local/physical vector: focus on endpoint telemetry (EDR) from affected hosts.

endpoint telemetry (EDR)

Timeline

What happened to this CVE, newest first.

2026
SSVC assessment updated
Oct 13, 2026 · CVE Program (cve.org) e CISA ADP
Record published
Oct 13, 2026
Fix documented
Oct 13, 2026 · NIST National Vulnerability Database
CVSS changed · 8.8
Oct 13, 2026 · NIST National Vulnerability Database
Source status changed · → Modified
Oct 13, 2026 · NIST National Vulnerability Database
Record created in this database
Oct 13, 2026 · NIST National Vulnerability Database
2022
CVE published
Feb 16, 2022 · hp

Source activity

Repeated readings are counted rather than listed.

1× Official description updated · Oct 13, 2026 – Oct 13, 2026

References

1 on the record

support.hp.com/us-en/document/ish_5661066-5661090-16
Patch, Vendor Advisory, x_refsource_MISC, NIST National Vulnerability Database

Elsewhere on this site

Hp
every CVE for this vendor

Privilege escalation
same class

CWE-269
other pages naming this weakness

Related CVEs (same products)

High CVE-2021-39301 Improper Privilege Management in Hp Z1 Entry Tower G5 Workstation Firmware Feb 16, 2022
High CVE-2021-39297 Improper Privilege Management in Hp 260 G3 Desktop Mini Pc Firmware Feb 16, 2022
High CVE-2021-39298 Improper Privilege Management in Hp Z1 Entry Tower G5 Workstation Firmware Feb 16, 2022
High CVE-2021-39300 Improper Privilege Management in Hp Z1 Entry Tower G5 Workstation Firmware Feb 16, 2022

Not in any source we poll

Listed rather than left blank: an empty field and an unmeasured one look identical on screen, and only one is a reason to look elsewhere.

No confirmed IOCs, IP addresses, domains, file hashes, or malware artifacts supplied.
No organization-specific asset inventory, compensating-control status, or patch deployment evidence supplied.
No exploit packet captures, log samples, or incident case IDs supplied.

Answered from this record

Text assembled only from the fields above — no additional claims.

What should defenders know first?

CVE-2021-39299 is "Improper Privilege Management in Hp 260 G3 Desktop Mini Pc Firmware", rated High. It affects 260 G3 Desktop Mini Pc Firmware (Hp); versions are in the scope table. It is not in CISA KEV, which does not rule out exploitation. CVSS 8.8 describes technical severity. EPSS 0.37% estimates the probability of exploitation in 30 days; neither replaces your asset context. First verify whether exposed or business-critical assets run the affected versions, apply vendor fixes or mitigations, and preserve logs for review.

Comments

Moderated technical discussion. Read the community guidelines.

No comments yet.