Several critical HP Support Assistant vulnerabilities expose Windows computers to remote code execution attacks. The vulnerabilities could allow attackers to elevate their privileges or delete arbitrary files following successful exploitation. HP has partially patched the vulnerabilities in December 2019 after receiving an initial disclosure report from researcher Bill Demirkapi during October 2019. However, HP failed to patch three of the local privilege escalation vulnerabilities which means that even if you are using the latest version of the software, you are still exposed to attacks. To fully mitigate all flaws, you will need to uninstall the vulnerable software by removing both HP Support.
Source: https://www.bleepingcomputer.com/news/security/windows-pcs-exposed-to-attacks-by-critical-hp-support-assistant-bugs/

