{"id":"CVE-2026-12555","state":"PUBLISHED","title":"HP Easy Start for macOS - Security Update","description":"Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.","publishedAt":"2026-08-24T16:00:23.156Z","updatedAt":"2026-09-03T15:13:15.889Z","severity":{"score":7.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"hp"},"assigner":"hp","products":["HP Inc HP Easy Start for macOS"],"affected":[{"vendor":"HP Inc","product":"HP Easy Start for macOS","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.16.7.260722","versionType":"custom"}],"platforms":["MacOS"]}],"references":["https://support.hp.com/us-en/document/ish_15512340-15512362-16/hpsbpi04124","https://ciphersecuritylabs.com/papers/rooted-in-trust-breaking-hp-easy-starts-macos-privilege-boundaries/"],"weaknesses":["CWE-379"],"ingestedAt":"2026-10-29T20:10:52.580Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/12xxx/CVE-2026-12555.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-12555","state":"PUBLISHED","datePublished":"2026-08-24T16:00:23.156Z","dateUpdated":"2026-09-03T15:13:15.889Z","assignerShortName":"hp","assignerOrgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateReserved":"2026-06-17T19:59:49.335Z"},"containers":{"cna":{"title":"HP Easy Start for macOS - Security Update","descriptions":[{"lang":"en","value":"Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities."}],"affected":[{"vendor":"HP Inc","product":"HP Easy Start for macOS","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.16.7.260722","versionType":"custom"}],"platforms":["MacOS"]}],"references":[{"url":"https://support.hp.com/us-en/document/ish_15512340-15512362-16/hpsbpi04124","tags":["vendor-advisory"]},{"url":"https://ciphersecuritylabs.com/papers/rooted-in-trust-breaking-hp-easy-starts-macos-privilege-boundaries/","tags":["third-party-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"HIGH","baseScore":7.7,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-379","lang":"en","description":"CWE-379 Creation of temporary file in directory with insecure permissions","type":"CWE"}]}],"providerMetadata":{"shortName":"hp","orgId":"74586083-13ce-40fd-b46a-8e5d23cfbcb2","dateUpdated":"2026-09-03T15:13:15.889Z"},"credits":[{"lang":"en","value":"Nir Yehoshua","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.4"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-12555","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-08-25T03:56:48.303782Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-27T16:24:51.227Z"}}]}}}