HP vulnerabilities
We track 168 vulnerabilities in HP products across 60+ products. 168 are rated high or critical, and 7 have been exploited in real attacks. The most recent was published on October 23, 2026.
Latest HP vulnerabilities
- 8.5 High severity
HP One Agent Software: Uncontrolled Search Path Element
A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might allow for escalation of privilege and/or arbitrary code execution. HP is releasing software updates to mitigate the potential vulnerability.
- 7.3 High severity
HP Support Assistant: Improper Privilege Management
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls.
- 8.8 High severity
HP AC Print & Scan: Improper Limitation of a Pathname to a Restricted Directory
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.
- 9.3 Critical severity
HP AC Print & Scan: Improper Control of Generation of Code
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.
- 9.3 Critical severity
HP AC Print & Scan: Improper Control of Generation of Code
HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software.
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Heap-based Buffer Overflow
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Heap-based Buffer Overflow
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Heap-based Buffer Overflow
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Integer Underflow (Wrap or Wraparound)
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Improper Neutralization of Special Elements used in an OS Command
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Improper Validation of Array Index
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Improper Neutralization of Special Elements used in an OS Command
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): UNIX Symbolic Link (Symlink) Following
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Heap-based Buffer Overflow
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 9.8 Critical severity
HP Linux Imaging and Printing Software (HPLIP): Out-of-bounds Write
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or
- 7.3 High severity
HP Support Assistant: Insufficient Granularity of Access Control
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls.
- 7.0 High severity
HP ImageDiags: Creation of Temporary File in Directory with Insecure Permissions
A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls.
- 7.7 High severity
HP Easy Start for macOS: Cleartext Transmission of Sensitive Information
Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.
- 7.7 High severity
HP Easy Start for macOS: Creation of Temporary File in Directory with Insecure Permissions
Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.
- 8.5 High severity
HP Easy Start for macOS: Use of Unmaintained Third Party Components
Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.
- 8.2 High severity
OMEN Gaming Hub: Improper Verification of Cryptographic Signature
A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls.
- 8.9 High severity
Web Jetadmin: Out-of-bounds Write
HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechanism.
- 7.5 High severity
HP DeskJet 2820 AIO Printer: Improper Check or Handling of Exceptional Conditions
Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through exposed APIs.
- 9.8 Critical severity
HPLIP: Integer Overflow or Wraparound
A flaw was found in HPLIP (HP Linux Imaging and Printing Software). This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in t
- 8.2 High severity
CCX: Uncontrolled Resource Consumption
The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities.
- 7.3 High severity
HP Fan Control App: Unquoted Search Path or Element
The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has been released to mitigate this potential vulnerability.
- 7.3 High severity
HP Dock Accessory: Creation of Temporary File in Directory with Insecure Permissions
A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking Stations, which might allow escalation of privilege and/or arbitrary code execution. HP is releasing software updates to mitigate the potentia
- 8.5 High severity
HP One Agent Software: Uncontrolled Search Path Element
Potential security vulnerabilities have been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privilege and/or denial of service. HP is releasing software updates to mitigate these potential vulnerabilities.
- 9.2 Critical severity
poly_trio_8300: Stack-based Buffer Overflow
In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code execution on Poly Voice products on the Linux platform.
- 7.8 High severity
HP Linux Imaging and Printing Software: Improper Neutralization of Special Elements used in a Command
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection.
- 9.8 Critical severity
HP Linux Imaging and Printing Software: Integer Overflow or Wraparound
A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing path when han
- 8.7 High severity
HP DeskJet 2800e All-in-One Printer series: Stack-based Buffer Overflow
Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan requests are improperly validated and handled by the MFP. WSD Scan is a Microsoft Windows–ba
- 7.1 High severity
HP System Event Utility: Incorrect Default Permissions
HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was remediated with HP System Event Utility version 3.2.16.
- 8.2 High severity
VVX: Use of Hard-coded Cryptographic Key
An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper validation of t
- 8.8 High severity
HP System Event Utility: Improper Limitation of a Pathname to a Restricted Directory
HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths. This potential vulnerability was remediated with HP System Event Utility version 3.2.12 and Omen Gaming Hub version 1101.2511.101.0.
- 7.0 High severity
HP Image Assistant: Race Condition Enabling Link Following
A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability could potentially allow a local attacker to escalate privileges via a race condition when installing packages.
- 7.5 High severity
HP Color LaserJet MFP M478-M479 series: Exposure of Sensitive Information to an Unauthorized Actor
Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server.
- 7.8 High severity
HP Client Management Script Library: Uncontrolled Search Path Element
A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during the installation process. HP is releasing software updates to mitigate the potential vulnerability.
- 9.8 Critical severity
HP ThinPro 8.1: Execution with Unnecessary Privileges
HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities.
- 8.5 High severity
Sound Research: Incorrect Privilege Assignment
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities