Vulnerability in HP, Inc. HP Hotkey Support Software
CVE-2025-43490
A potential security vulnerability has been identified in the HPAudioAnalytics service included in the HP Hotkey Support software, which might allow escalation of privilege. HP is releasing software updates to mitigate the potential vulnerability.
Published · last modified .
EPSS exploit prediction
EPSS: 0.002 (5.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 5th percentile — 5.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000
Affected products
- HP, Inc. HP Hotkey Support Software — versions See HP security bulletin reference for affected versions
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-43490?
- CVE-2025-43490 is a vulnerability in HP, Inc. HP Hotkey Support Software, classified under Improper Link Resolution Before File Access. Published 2025-08-15.
- Is CVE-2025-43490 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.