HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 / CVE-2026-12556
Cipher Security Labs disclosed three high-severity macOS privilege vulnerabilities in HP Easy Start, fixed in version 2.16.7.260722.
HP Easy Start for macOS contains three high-severity vulnerabilities, CVE-2026-12554, CVE-2026-12555, and CVE-2026-12556, that break the product's macOS privilege boundaries. The issues were researched by Cipher Security Labs and coordinated with HP under advisory HPSBPI04124. Fixes are available in HP Easy Start 2.16.7.260722 and later versions.
- Three high-severity flaws affect HP Easy Start for macOS privilege boundaries.
- Coordinated disclosure with HP under advisory HPSBPI04124.
- Fixed in HP Easy Start 2.16.7.260722 and later.
- Vendors
- HP
- Products
- HP Easy Start
- Organizations
- Cipher Security Labs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-12554+1 related CVE | Local Privilege Escalation in HP Easy Start for macOS | 8.5 group max | <1% | ||
| CVE-2026-12555 | Privilege escalation via insecure temporary file handling in HP Easy Start for macOS | 7.7 | <1% |
From the original article
Posted by Nir Yehoshua on Sep 03 Hello Full Disclosure list, Cipher Security Labs has published technical details for three High-severity vulnerabilities affecting HP Easy Start for macOS. The issues were coordinated with HP and are addressed in HP Easy Start 2. 16.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.