The computer manufacturing company HP has published a security advisory warning customers of a high severity vulnerability in their pre-installed technical support software tool, HP Support Assistant. HP Support Assistant uses Fusion to launch the HP Performance Tune-up diagnostic tool, and the vulnerability allows for privilege escalation when Fusion launches HP Performance Tune-up from within HP Support Assistant. If exploited, attackers with access to a vulnerable device could escalate their privileges to SYSTEM, allowing them to carry out malicious activity with SYSTEM-level privileges. The vulnerability, tracked as CVE-2022-38395, is described as a DLL hijacking flaw, and is exploited when an attacker abuses a DLL by injecting malicious code and placing it in the same folder as HP Support Assistant. This type of DLL hijacking attack takes advantage of the fact that Windows prioritizes these libraries over DLLs in the System32 directory. When the library automatically loads upon the launch of HP Performance Tune-up, the code executes with the elevated SYSTEM privileges of HP Support Assistant. Although there are many devices with HP Support Assistant pre-installed, and the exploitation of this flaw is low complexity, it received a CVSS score of 8.2/10 due to the fact that the attackers would need to first gain access to the vulnerable system. CTIX analysts recommend that all HP users ensure that they update to the latest stable firmware as soon as possible to prevent exploitation.