CVE-2026-91100: Improper Neutralization of Special Elements used in an OS Command

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

PT-2026-93920

Name of the Vulnerable Software and Affected Versions HPLIP versions prior to 3.26.6-1.1 Description Multiple security issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

PT-2026-93921

Name of the Vulnerable Software and Affected Versions HPLIP versions prior to 3.26.6-1.1 Description Multiple security issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

PT-2026-93905

Name of the Vulnerable Software and Affected Versions HPLIP versions prior to 3.26.6-1.1 Description Multiple security issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

PT-2026-93925

Name of the Vulnerable Software and Affected Versions HPLIP affected versions not specified Description Multiple issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

CVE-2026-91101: Improper Validation of Array Index

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

CVE-2026-91099: UNIX Symbolic Link (Symlink) Following

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under...

PT-2026-93906

Name of the Vulnerable Software and Affected Versions HPLIP affected versions not specified Description Multiple issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

PT-2026-93926

Name of the Vulnerable Software and Affected Versions HPLIP affected versions not specified Description Multiple issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

PT-2026-93907

Name of the Vulnerable Software and Affected Versions HPLIP versions prior to 3.26.6-1.1 Description Multiple security issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

PT-2026-93923

Name of the Vulnerable Software and Affected Versions HPLIP versions prior to 3.26.6-1.1 Description Multiple security issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

PT-2026-93924

Name of the Vulnerable Software and Affected Versions HPLIP affected versions not specified Description Multiple issues within several software components could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file...

CVE-2026-65348

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system...

CVE-2026-43785

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to modify a file it only had permission to read...

CVE-2026-84514

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system...

CVE-2026-43785

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to modify a file it only had permission to read...

CVE-2026-43785

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. An app may be able to modify a file it only had permission to read...

CVE-2026-43785

CVE-2026-43785 is a permissions issue in the File Bookmark component of Apple's operating systems, fixed in iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, and visionOS 27 . The vulnerability allowed an app to modify a file it only had permission to read , ...

CVE-2026-86886

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

CVE-2026-84609

A permissions issue exists in several Apple operating systems, including iOS 27 , iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , macOS Tahoe 26.7 , tvOS 27 , visionOS 27 , and watchOS 27 . The root cause is related to insufficient path validation , which could allow an application to mod...