CVE-2026-12554

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.

CVSS

No CVSS.

References

Link	Resource
https://ciphersecuritylabs.com/papers/rooted-in-trust-breaking-hp-easy-starts-macos-privilege-boundaries/
https://support.hp.com/us-en/document/ish_15512340-15512362-16/hpsbpi04124

Configurations

No configuration.

History

12 Oct 2026, 15:10

Type	Values Removed	Values Added
Summary		(es) Posibles vulnerabilidades de seguridad han sido identificadas en HP Easy Start para macOS, versiones anteriores a la 2.16.7.260722. Estas posibles vulnerabilidades podrían llevar a una escalada de privilegios. HP está lanzando actualizaciones para mitigar estas posibles vulnerabilidades.

Information

Published : 2026-08-24 16:16

Updated : 2026-10-12 15:10

NVD link : CVE-2026-12554

Mitre link : CVE-2026-12554

CVE.ORG link : CVE-2026-12554

JSON object : View

Products Affected

No product.

CWE

CWE-1104

Use of Unmaintained Third Party Components

{"id": "CVE-2026-12554", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-12554", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-25T03:56:47.074460Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "hp-security-alert@hp.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.5, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "hp-security-alert@hp.com", "affectedData": [{"vendor": "HP Inc", "product": "HP Easy Start for macOS", "versions": [{"status": "affected", "version": "0", "lessThan": "2.16.7.260722", "versionType": "custom"}], "platforms": ["MacOS"], "defaultStatus": "unaffected"}]}], "published": "2026-08-24T16:16:54.967", "references": [{"url": "https://ciphersecuritylabs.com/papers/rooted-in-trust-breaking-hp-easy-starts-macos-privilege-boundaries/", "source": "hp-security-alert@hp.com"}, {"url": "https://support.hp.com/us-en/document/ish_15512340-15512362-16/hpsbpi04124", "source": "hp-security-alert@hp.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "hp-security-alert@hp.com", "description": [{"lang": "en", "value": "CWE-1104"}]}], "descriptions": [{"lang": "en", "value": "Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities."}, {"lang": "es", "value": "Posibles vulnerabilidades de seguridad han sido identificadas en HP Easy Start para macOS, versiones anteriores a la 2.16.7.260722. Estas posibles vulnerabilidades podr\u00edan llevar a una escalada de privilegios. HP est\u00e1 lanzando actualizaciones para mitigar estas posibles vulnerabilidades."}], "lastModified": "2026-10-12T15:10:00.207", "sourceIdentifier": "hp-security-alert@hp.com"}