{"id":"CVE-2023-26299","url":"https://www.cyber-defence.io/tools/cve/CVE-2023-26299","generatedAt":"2026-10-23T16:10:30.994Z","title":"A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS), which might allow arbitrary code execution.","description":"A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS), which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability.","published":"2023-06-30T16:15:10.000Z","lastModified":"2026-06-17T05:43:01.000Z","status":"Modified","sourceIdentifier":"hp-security-alert@hp.com","cvss":{"version":"3.1","score":7,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-367"],"affected":["hp/260 g4 desktop mini firmware","hp/t430 firmware","hp/t628 firmware","hp/240 g10 firmware","hp/245 g6 firmware","hp/245 g7 firmware","hp/245 g8 firmware","hp/247 g8 firmware","hp/250 g10 firmware","hp/255 g10 firmware","hp/349 g7 firmware","hp/470 g10 firmware","hp/470 g9 firmware","hp/zhan 99 g2 firmware","hp/zhan 99 g4 firmware","hp/vr backpack g2 firmware","hp/200 g3 firmware","hp/200 g4 22 all-in-one firmware","hp/200 pro g4 22 all-in-one firmware","hp/205 g4 22 all-in-one firmware","hp/205 pro g4 22 all-in-one firmware","hp/280 g3 firmware","hp/280 g4 firmware","hp/280 g4 microtower firmware","hp/280 g5 firmware","hp/280 g5 small form factor firmware","hp/280 g6 firmware","hp/280 g8 microtower firmware","hp/280 pro g3 firmware","hp/280 pro g4 microtower firmware","hp/280 pro g5 small form factor firmware","hp/282 g5 firmware","hp/282 g6 firmware","hp/282 pro g4 microtower firmware","hp/288 g5 firmware","hp/288 g6 firmware","hp/288 pro g4 microtower firmware","hp/290 g1 firmware","hp/290 g2 firmware","hp/290 g2 microtower firmware","hp/290 g3 firmware","hp/290 g3 small form factor firmware","hp/290 g4 firmware","hp/desktop pro g1 microtower firmware","hp/pro small form factor 280 g9 desktop firmware","hp/pro small form factor 290 g9 desktop firmware","hp/pro small form factor zhan 66 g9 desktop firmware","hp/pro tower 200 g9 desktop firmware","hp/pro tower 280 g9 desktop firmware","hp/pro tower 290 g9 desktop firmware","hp/pro tower zhan 99 g9 desktop firmware","hp/proone 240 g10 firmware","hp/proone 240 g9 firmware","hp/proone 440 g3 firmware","hp/proone 490 g3 firmware","hp/proone 496 g3 firmware","hp/z vr backpack g1 workstation firmware","hp/zhan 86 pro g2 microtower firmware","hp/zhan 99 pro g1 microtower firmware"],"epss":{"score":0.00128,"percentile":0.02242,"date":"2026-10-22","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.13%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://support.hp.com/us-en/document/ish_8642715-8642746-16/hpsbhf03850","tags":["Patch","Vendor Advisory"],"source":"hp-security-alert@hp.com"},{"url":"https://support.hp.com/us-en/document/ish_8642715-8642746-16/hpsbhf03850","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-26299","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}