CVE-2026-12555

HP Easy Start for macOS - Security Update

State: Published
Severity: 7.7 High
Published: Aug 24, 2026
Updated: Sep 3, 2026
Reserved: Jun 17, 2026

Description

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.

Scores

CVSS	Score	Vector	Source
4.0	7.7 High	CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	hp

Weaknesses

CWE-379 Creation of temporary file in directory with insecure permissions

Affected Products

Product	Versions
HP Easy Start for macOSHP Inc	before 2.16.7.260722Affected

References

https://support.hp.com/us-en/document/ish_15512340-15512362-16/hpsbpi04124vendor-advisory
https://ciphersecuritylabs.com/papers/rooted-in-trust-breaking-hp-easy-starts-macos-privilege-boundaries/third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.