{"affected":[{"defaultStatus":"unaffected","product":"HP Support Assistant","source":"CNA: hp","vendor":"HP Inc.","versions":[{"status":"unknown","version":"See HP Security Bulletin reference for affected versions."}]}],"cveId":"CVE-2025-10578","cwes":["CWE-269"],"description":"A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.","epss":{"date":"2026-11-03","percentile":0.01772,"score":0.00119},"exploits":[],"kev":null,"metrics":[{"score":5.8,"severity":"medium","source":"CNA: hp","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1793742767935,"publishedAt":1759344289949,"references":[{"source":"CNA: hp","tags":[],"url":"https://support.hp.com/us-en/document/ish_13048717-13048785-16/hpsbgn04053"}],"remediation":[],"revision":"01e3973d83f3dc709a1322a719cad71925d9197a72546917d4ae8ad191451d5f","sources":[{"modifiedAt":1793742767935,"name":"CNA: hp","retrievedAt":1793744130607,"url":"https://www.cve.org/CVERecord?id=CVE-2025-10578"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793747322114,"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-10578"}],"ssvc":{"assessedAt":1759377348827,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"HP Support Assistant - Potential Escalation of Privilege","updatedAt":1793747322114}