https://vulnogram.org/ Most recent CVEs assigned by HP Inc. (hp). https://vulnogram.org/seaview/icons/hp.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-106177 https://vulnogram.org/CVE-2026-106177 A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability. Medium Thu, 08 Oct 2026 15:32:16 GMT https://vulnogram.org/CVE-2026-84900 https://vulnogram.org/CVE-2026-84900 Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities. Previous versions of HP ThinPro (pri… Medium Mon, 05 Oct 2026 20:28:48 GMT https://vulnogram.org/CVE-2026-19915 https://vulnogram.org/CVE-2026-19915 A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls. High Tue, 22 Sep 2026 14:57:28 GMT https://vulnogram.org/CVE-2026-89084 https://vulnogram.org/CVE-2026-89084 HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software. High Network Exploitable Wed, 16 Sep 2026 19:54:52 GMT https://vulnogram.org/CVE-2026-89083 https://vulnogram.org/CVE-2026-89083 HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software. Critical Network Exploitable Wed, 16 Sep 2026 19:53:06 GMT https://vulnogram.org/CVE-2026-89082 https://vulnogram.org/CVE-2026-89082 HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary file write under certain conditions, impacting the HP Advance server hosting the software. Critical Network Exploitable Wed, 16 Sep 2026 19:50:40 GMT https://vulnogram.org/CVE-2026-91106 https://vulnogram.org/CVE-2026-91106 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disc… Critical Network Exploitable Wed, 16 Sep 2026 18:56:04 GMT https://vulnogram.org/CVE-2026-91105 https://vulnogram.org/CVE-2026-91105 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disc… High Network Exploitable Wed, 16 Sep 2026 18:54:53 GMT https://vulnogram.org/CVE-2026-91104 https://vulnogram.org/CVE-2026-91104 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disc… Critical Network Exploitable Wed, 16 Sep 2026 18:53:59 GMT https://vulnogram.org/CVE-2026-91103 https://vulnogram.org/CVE-2026-91103 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disc… Medium Wed, 16 Sep 2026 18:52:28 GMT https://vulnogram.org/CVE-2026-91102 https://vulnogram.org/CVE-2026-91102 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disc… High Wed, 16 Sep 2026 18:50:55 GMT https://vulnogram.org/CVE-2026-91101 https://vulnogram.org/CVE-2026-91101 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disc… Medium Wed, 16 Sep 2026 18:49:00 GMT https://vulnogram.org/CVE-2026-91100 https://vulnogram.org/CVE-2026-91100 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disc… Medium Wed, 16 Sep 2026 18:47:42 GMT https://vulnogram.org/CVE-2026-91099 https://vulnogram.org/CVE-2026-91099 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disc… Medium Wed, 16 Sep 2026 18:45:51 GMT https://vulnogram.org/CVE-2026-91098 https://vulnogram.org/CVE-2026-91098 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disc… High Network Exploitable Wed, 16 Sep 2026 18:43:03 GMT https://vulnogram.org/CVE-2026-91097 https://vulnogram.org/CVE-2026-91097 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disc… High Network Exploitable Wed, 16 Sep 2026 18:39:12 GMT https://vulnogram.org/CVE-2026-15431 https://vulnogram.org/CVE-2026-15431 A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls. High Thu, 03 Sep 2026 18:19:14 GMT https://vulnogram.org/CVE-2026-82346 https://vulnogram.org/CVE-2026-82346 A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls. High Mon, 31 Aug 2026 20:35:39 GMT https://vulnogram.org/CVE-2026-12556 https://vulnogram.org/CVE-2026-12556 Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilit… High Mon, 24 Aug 2026 16:01:58 GMT https://vulnogram.org/CVE-2026-12555 https://vulnogram.org/CVE-2026-12555 Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilit… High Mon, 24 Aug 2026 16:00:23 GMT https://vulnogram.org/CVE-2026-12554 https://vulnogram.org/CVE-2026-12554 Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilit… High Mon, 24 Aug 2026 15:58:29 GMT https://vulnogram.org/CVE-2026-75946 https://vulnogram.org/CVE-2026-75946 A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls. High Fri, 21 Aug 2026 13:50:55 GMT https://vulnogram.org/CVE-2026-17639 https://vulnogram.org/CVE-2026-17639 Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests. Medium Network Exploitable Mon, 17 Aug 2026 18:35:32 GMT https://vulnogram.org/CVE-2026-12553 https://vulnogram.org/CVE-2026-12553 HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechanism. High Network Exploitable Mon, 17 Aug 2026 18:13:23 GMT https://vulnogram.org/CVE-2026-18243 https://vulnogram.org/CVE-2026-18243 Certain HP DesignJet products may be potentially vulnerable to cross-site scripting (XSS), which may allow unauthenticated HTTP requests to view print job previews. Medium Mon, 03 Aug 2026 15:58:54 GMT https://vulnogram.org/CVE-2026-5922 https://vulnogram.org/CVE-2026-5922 The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage. Medium Wed, 08 Jul 2026 21:39:06 GMT https://vulnogram.org/CVE-2026-5923 https://vulnogram.org/CVE-2026-5923 Malicious use of a stolen cookie might allow modifications to the contents of the IP phone’s webpage. Medium Wed, 08 Jul 2026 21:29:42 GMT https://vulnogram.org/CVE-2026-2891 https://vulnogram.org/CVE-2026-2891 The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities. High Network Exploitable Wed, 01 Jul 2026 14:08:45 GMT https://vulnogram.org/CVE-2026-8864 https://vulnogram.org/CVE-2026-8864 The HP Fan Control App might allow local escalation of privileges. An updated version of HP Fan Control App has been released to mitigate this potential vulnerability. High Tue, 30 Jun 2026 16:21:10 GMT https://vulnogram.org/CVE-2026-7539 https://vulnogram.org/CVE-2026-7539 A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking Stations, which might allow escalation of privilege and/or arbitrary code execution. HP is releasing software updates to mitigate th… High Wed, 24 Jun 2026 19:47:15 GMT https://vulnogram.org/CVE-2026-5064 https://vulnogram.org/CVE-2026-5064 Potential security vulnerabilities have been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privilege and/or denial of service. HP is releasing software updates to mitigate these potential vulnerabiliti… High Mon, 15 Jun 2026 21:23:01 GMT https://vulnogram.org/CVE-2026-0826 https://vulnogram.org/CVE-2026-0826 In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code execution on Poly Voice products on the Linux platform. Critical Network Exploitable Mon, 01 Jun 2026 14:55:00 GMT https://vulnogram.org/CVE-2026-8632 https://vulnogram.org/CVE-2026-8632 A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via operating system command injection. High Wed, 20 May 2026 20:14:36 GMT https://vulnogram.org/CVE-2026-8631 https://vulnogram.org/CVE-2026-8631 A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of privileges and/or arbitrary code execution via an integer overflow in the hpcups processing pat… Critical Network Exploitable Wed, 20 May 2026 20:11:14 GMT https://vulnogram.org/CVE-2026-3291 https://vulnogram.org/CVE-2026-3291 Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices. HP is releasing updates to mitigate these potential vulnerabilities. Medium Wed, 06 May 2026 21:53:03 GMT https://vulnogram.org/CVE-2026-4682 https://vulnogram.org/CVE-2026-4682 Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan requests are improperly validated and handled by the MFP. WSD Scan is a Microsoft… High Wed, 15 Apr 2026 14:32:31 GMT https://vulnogram.org/CVE-2026-4667 https://vulnogram.org/CVE-2026-4667 HP System Optimizer might potentially be vulnerable to escalation of privilege. HP is releasing an update to mitigate this potential vulnerability. High Wed, 15 Apr 2026 14:22:55 GMT https://vulnogram.org/CVE-2026-2915 https://vulnogram.org/CVE-2026-2915 HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was remediated with HP System Event Utility version 3.2.16. Medium Tue, 03 Mar 2026 19:25:56 GMT https://vulnogram.org/CVE-2026-0754 https://vulnogram.org/CVE-2026-0754 An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools. This extracted certificate could be accepted by a SIP service provider if the service provider does not perform proper valid… High Tue, 03 Mar 2026 00:48:06 GMT https://vulnogram.org/CVE-2026-2832 https://vulnogram.org/CVE-2026-2832 Certain Samsung MultiXpress Multifunction Printers may be vulnerable to information disclosure, potentially exposing address book entries and other device configuration information through specific APIs without proper authorization. Medium Fri, 20 Feb 2026 17:21:02 GMT https://vulnogram.org/CVE-2026-1578 https://vulnogram.org/CVE-2026-1578 HP App for Android is potentially vulnerable to cross-site scripting (XSS) when using an outdated version of the application via mobile devices. HP is releasing updates to mitigate these potential vulnerabilities. Medium Fri, 13 Feb 2026 14:56:42 GMT https://vulnogram.org/CVE-2026-1997 https://vulnogram.org/CVE-2026-1997 Certain HP OfficeJet Pro printers may expose information if Cross‑Origin Resource Sharing (CORS) is misconfigured, potentially allowing unauthorized web origins to access device resource. CORS is disabled by default on Pro‑class devices and can only… Medium Network Exploitable Tue, 10 Feb 2026 17:54:46 GMT https://vulnogram.org/CVE-2026-1996 https://vulnogram.org/CVE-2026-1996 Certain HP OfficeJet Pro printers may be vulnerable to potential denial of service when the IPP requests are mishandled, failing to establish a TCP connection. Medium Network Exploitable Tue, 10 Feb 2026 17:34:18 GMT https://vulnogram.org/CVE-2025-14432 https://vulnogram.org/CVE-2025-14432 In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes. The affected log file is visible only to users with admin credentials. This is limited to… High Tue, 16 Dec 2025 15:15:04 GMT https://vulnogram.org/CVE-2025-11531 https://vulnogram.org/CVE-2025-11531 HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths. This potential vulnerability was remediated with HP System Event Utility version 3.2.12 and Omen Gaming Hub version 1101.2511.101.0. Medium Tue, 09 Dec 2025 18:29:51 GMT https://vulnogram.org/CVE-2025-13492 https://vulnogram.org/CVE-2025-13492 A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability could potentially allow a local attacker to escalate privileges via a race condition when installing packages. Medium Wed, 03 Dec 2025 16:33:39 GMT https://vulnogram.org/CVE-2025-12785 https://vulnogram.org/CVE-2025-12785 Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server. Medium Thu, 13 Nov 2025 17:38:09 GMT https://vulnogram.org/CVE-2025-12784 https://vulnogram.org/CVE-2025-12784 Certain HP LaserJet Pro printers may be vulnerable to information disclosure leading to credential exposure by altering the scan/send destination address and/or modifying the LDAP Server. Medium Thu, 13 Nov 2025 17:35:09 GMT https://vulnogram.org/CVE-2025-11761 https://vulnogram.org/CVE-2025-11761 A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during the installation process. HP is releasing software updates to mitigate the potential vulnerab… High Mon, 03 Nov 2025 15:13:39 GMT https://vulnogram.org/CVE-2025-11998 https://vulnogram.org/CVE-2025-11998 The following HP Card Readers B Models (X3D03B & Y7C05B) are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device (such as a smartphone/smartwatches) is in p… Medium Thu, 30 Oct 2025 16:00:33 GMT