CVE-2026-12555

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.

CVSS

No CVSS.

References

Link	Resource
https://ciphersecuritylabs.com/papers/rooted-in-trust-breaking-hp-easy-starts-macos-privilege-boundaries/
https://support.hp.com/us-en/document/ish_15512340-15512362-16/hpsbpi04124

Configurations

No configuration.

History

12 Oct 2026, 15:10

Type	Values Removed	Values Added
Summary		(es) Se han identificado posibles vulnerabilidades de seguridad en HP Easy Start para macOS, versiones anteriores a la 2.16.7.260722. Estas posibles vulnerabilidades podrían llevar a una escalada de privilegios. HP está lanzando actualizaciones para mitigar estas posibles vulnerabilidades.

Information

Published : 2026-08-24 16:16

Updated : 2026-10-12 15:10

NVD link : CVE-2026-12555

Mitre link : CVE-2026-12555

CVE.ORG link : CVE-2026-12555

JSON object : View

Products Affected

No product.

CWE

CWE-379

Creation of Temporary File in Directory with Insecure Permissions

{"id": "CVE-2026-12555", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-12555", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-25T03:56:48.303782Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "hp-security-alert@hp.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.7, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "hp-security-alert@hp.com", "affectedData": [{"vendor": "HP Inc", "product": "HP Easy Start for macOS", "versions": [{"status": "affected", "version": "0", "lessThan": "2.16.7.260722", "versionType": "custom"}], "platforms": ["MacOS"], "defaultStatus": "unaffected"}]}], "published": "2026-08-24T16:16:55.130", "references": [{"url": "https://ciphersecuritylabs.com/papers/rooted-in-trust-breaking-hp-easy-starts-macos-privilege-boundaries/", "source": "hp-security-alert@hp.com"}, {"url": "https://support.hp.com/us-en/document/ish_15512340-15512362-16/hpsbpi04124", "source": "hp-security-alert@hp.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "hp-security-alert@hp.com", "description": [{"lang": "en", "value": "CWE-379"}]}], "descriptions": [{"lang": "en", "value": "Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities."}, {"lang": "es", "value": "Se han identificado posibles vulnerabilidades de seguridad en HP Easy Start para macOS, versiones anteriores a la 2.16.7.260722. Estas posibles vulnerabilidades podr\u00edan llevar a una escalada de privilegios. HP est\u00e1 lanzando actualizaciones para mitigar estas posibles vulnerabilidades."}], "lastModified": "2026-10-12T15:10:00.207", "sourceIdentifier": "hp-security-alert@hp.com"}