Privilege Escalation of Poly Devices on the Android Platform

A local attacker who can execute code on the device could potentially escalate privileges through the Android Runtime vulnerability. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected products with minimum versions that mitigate the potential...

Certain HP ScanJet Pro and Enterprise Devices - Potential Information Disclosure

Certain HP ScanJet Pro and Enterprise devices may be affected by an information disclosure vulnerability that exposes security sensitive information through the web browser interface Update your printer firmware...

Samsung Print Service Plugin – Potential Information Disclosure

Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices. HP is releasing updates to mitigate these potential vulnerabilities. Update your application...

HP System Event Utility – Denial of Service

HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was remediated with HP System Event Utility version 3.2.16. HP has identified affected versions and the minimum version v3.2.16 or higher that mitigates the potential...

Insyde UEFI Digital Certificate Injection

A potential security vulnerability has been identified in certain HP PC products using Insyde BIOS InsydeH20 UEFI Firmware, which might allow escalation of privilege, arbitrary code execution, denial of service, and/or information disclosure. Insyde is releasing mitigation for the potential...

HP Universal Scan - Potential Information Disclosure

HP Universal Scan is vulnerable to potential information disclosure due to code vulnerability within the product's solution open-source library libssh2. Update your printer software...

Intel Graphics Software November 2024 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Graphics software which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

AMD Graphics Driver - DirectX® 11 Shader Vulnerabilities

AMD has informed HP of potential vulnerabilities identified in the AMD Radeon™ user mode Driver for DirectX® 11, which might allow arbitrary code execution. AMD is releasing software updates to mitigate these vulnerabilities. AMD has released updates to mitigate the potential vulnerabilities. HP...

PC BIOS Security Updates - Intel Processor Stream Cache

Intel has informed HP of potential security vulnerabilities in some Intel® Processor stream cache mechanisms, which might allow escalation of privilege. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

HPSBPI03622 rev. 1 - HP Access Control - Potential Security Vulnerability

Potential Security Impact Elevation of privilege Source: HP VULNERABILITY SUMMARY A potential security vulnerability has been identified in the software solution HP Access Control. This vulnerability could potentially grant elevation of privilege. RESOLUTION HP has provided the software updates f...

HPSBHF3549 rev.2 - ThinkPwn UEFI BIOS SmmRuntime Escalation of Privilege

Potential Security Impact System downtime, or privilege escalation. Source:HP, HP Product Security Response Team PSRT Reported by: Dmytro Oleksiuk VULNERABILITY SUMMARY A security vulnerability identified with UEFI firmware, dubbed ThinkPwn, has been addressed in certain HP commercial notebook PC...

HPSBPI02711 SSRT100647 rev.2 - HP MFP Digital Sending Software Running on Windows, Local Information Disclosure

Potential Security Impact Local information disclosure VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP MFP Digital Sending Software running on Windows. The vulnerability could result in disclosure of personal information contained in workflow metadata to...

HPSBPI02507 SSRT100012 rev.3 - HP DreamScreen, Remote Disclosure of Information

Potential Security Impact Remote disclosure of information VULNERABILITY SUMMARY A potential security vulnerability has been identified with web-connected HP DreamScreen. This vulnerability could be exploited remotely to allow disclosure of information. RESOLUTION HP has provided the following...

HPSBPI01026 SSRT2397 rev.3 - HP Web Jetadmin, Remote Unauthorized Access, Denial of Service (DoS)

Potential Security Impact Remote unauthorized access to files, Denial of Service DoS VULNERABILITY SUMMARY A potential vulnerability has been identified with HP Web Jetadmin. The vulnerability could be exploited to allow remote unauthorized access to files or to create a Denial of Service DoS...

Certain HP DeskJet All in One – Potential Information Disclosure

Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive information through exposed APIs. Update your printer firmware...

BIOS Escalation of Privilege for Certain HP Desktops

A potential security vulnerability has been identified in the system BIOS for some HP PC products, which might allow escalation of privilege and/or arbitrary code execution. HP is releasing firmware updates to mitigate the potential vulnerability. HP has identified affected platforms and...

HP One Agent Software – Security Update

Potential security vulnerabilities have been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privilege and/or denial of service. HP is releasing software updates to mitigate these potential vulnerabilities. Mitigation is available in HP Privacy...

Certain HP DeskJet All In One (AIO) Devices – Potential Remote Code Execution & Potential Buffer Overflow

Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices WSD scan requests are improperly validated and handled by the MFP. As a temporary mitigation measure for the buffer overflow vulnerability,...

HP Card Readers (B Models) – Potential Information Disclosure

The following HP Card Readers B Models X3D03B & Y7C05B are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device such as a smartphone/smartwatches is in proximity during a card swipe event. HP has determin...

HP Support Assistant – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion. HP has identified affected versions and the minimum version that mitigates the potential vulnerability. See the affected product...

Intel 2025.2 IPU - Processors May 2025 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Processors, which might allow denial of service or information disclosure. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

Elan Fingerprint Sensor Security Update

A potential vulnerability has been identified in certain HP PC products using Elan fingerprint sensor devices, which might allow operating system authentication bypass by spoofing. HP is releasing BIOS and fingerprint sensor driver updates to address the potential vulnerability. Elan has resolved...

AMD Client Processors February 2025 Security Update

AMD has informed HP of potential vulnerabilities in platform components for some AMD Client Processors, which might allow arbitrary code execution, loss of integrity, loss of confidentiality, or loss of availability. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has...

Intel CST Software November 2024 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Context Sensing Technology Intel® CST software, which might allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel Context Sensing Service ICCS is used in HP Auto Lo...

HPSBHF03598 rev. 6 - EDK II Untested Memory Not Covered by SMM Page Protections

Potential Security Impact Escalation of Privilege, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: TianoCore Bugzilla VULNERABILITY SUMMARY Incorrect handling of memory types in TianoCore firmware potentially allows an attacker with local access to bypass...

ROCA - Vulnerable RSA Generation: HP Trusted Platform Module (TPM) Accessory and Certain HP Enterprise Printer and MFP Products, Certain HP PageWide Printer and MFP Products with Standard TPM

A potential security vulnerability known as “ROCA: Vulnerable RSA Generation” has been identified with the RSA keys generated by the HP Trusted Platform Module TPM Accessory and printers equipped with a TPM. This vulnerability could potentially be exploited remotely to allow remote disclosure of...

Intel PROSet/Wireless WiFi Software August 2026 Security Update

Intel has informed HP of potential security vulnerabilities for some Intel® PROSet/Wireless WiFi Software, which might allow escalation of privileges or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the...

HP Image Assistant - Potential Escalation of Privilege

A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability could potentially allow a local attacker to escalate privileges via a race condition when installing packages. HP has identified affected versions and the minimum version th...

Poly Lens Desktop Application – Privilege Escalation

A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected products with...

NVIDIA GPU Display Driver January 2025 Security Update

NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA® GPU Display Driver for Windows, which might allow information disclosure, denial of service, and data tampering. NVIDIA has released updates to mitigate these vulnerabilities. NVIDIA has released updates to...

Intel 2024.4 IPU - Processor February 2025 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Processors, which might allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has identified affected...

Intel Graphics Software February 2025 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Graphics software, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities Intel has released updates to mitigate the potential...

Certain HP Print Products–Potential Remote Code Execution and/or Elevation of Privilege with the HP Smart Universal Printing Driver

Client / Server PCs with the HP Smart Universal Printing Driver installed are potentially vulnerable to Remote Code Execution and/or Elevation of Privilege. A client using the HP Smart Universal Printing Driver that sends a print job comprised of a malicious XPS file could potentially lead to...

Clariti Manager – Privilege Escalation Through Sudo

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls. The recommendation is to update an impacted device to firmware build 10.12.0.2100 or later. Customers will receive the latest build...

HPSBHF03600 rev. 2 - Insecure Handling of BIOS and AMT Passwords

Potential Security Impact Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY A potential security vulnerability has been identified with the Intel platform code firmware included in certain Intel vPro Processor families with AMT...

HPSBPI02265 SSRT3515 rev.2 - Re-release of HPSBMI00004 HP Jetdirect Running ftp, Advisory

Potential Security Impact Advisory VULNERABILITY SUMMARY Some security scanners generate warnings that the Jetdirect ftp directory is writable. RESOLUTION To restrict printing or suppress the security scanners warning, the ftp service can be disabled. To disable ftp, telnet to the Jetdirect devic...

HPSBPI02078 SSRT5979 rev.3 - HP Jetdirect 635n IPv6/IPsec Print Server (J7961A), Remote Denial of Service (DoS)

Potential Security Impact Remote Denial of Service DoS VULNERABILITY SUMMARY Potential vulnerabilities have been identified with the HP Jetdirect 635n IPv6/IPsec Print Server J7961A . These vulnerabilities may be exploited remotely by an unauthorized user to create a Denial of Service DoS...

HP Web Jetadmin (WJA) - Potential Arbitrary File Read/Write

HP has identified a potential vulnerability in HP Web Jetadmin WJA that may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechanism. Update your WJA Software to the latest version...

NVIDIA Nano SSH Key Duplication

A potential security vulnerability has been identified in some HP ZGX Nano G1n AI Station products where identical SSH host keys were deployed during the manufacturing process prior to March 19th, 2026. Successful exploitation might lead to unauthorized code execution, privilege escalation, denia...

HP Sure Start IFD Protection - BIOS Security Update

A potential security vulnerability has been identified in HP Sure Start’s protection of the Intel Flash Descriptor in certain HP PC products, which might allow security bypass, arbitrary code execution, loss of integrity or confidentiality, or denial of service. HP is releasing BIOS updates to...

HyperX NGENUITY - Arbitrary Code Execution

HyperX NGENUITY software is potentially vulnerable to arbitrary code execution. HP is releasing updated software to address the potential vulnerability. Use the following steps to resolve potential vulnerabilities...

HP Universal Print Driver – Potential Denial of Service

HP Universal Print Driver is potentially vulnerable to denial of service due to buffer overflow in versions of UPD 7.4 or older e.g., v7.3.x, v7.2.x, v7.1.x, etc.. Update your printer software...

HP Touchpoint Analytics Service – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products with versions prior to 4.2.2439. This vulnerability could potentially allow a local attacker to escalate privileges. HP is providing software updates to mitigate this potential...

Certain Poly Devices – Path Traversal Vulnerability - Arbitrary File Access by Unauthorized User

A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not properly prevent path traversal and could lead to information disclosure. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected produc...

HP Universal Print Driver Series (PCL 6 and PostScript) - Potential Security Vulnerabilities

Potential vulnerabilities have been identified in HP Universal Print Driver Series PCL 6 and PostScript involving the following libraries: Update your version of the HP Universal Print Driver Series...

Certain HP DesignJet products–Credentials reflection

Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials. Update your printer firmware...

Samsung Universal Print Driver for Windows–Potential Escalation of Privilege

The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shell in the tool. This is only applicable for products in the application released or manufactured before 2018. Update your printer software...

Clariti Manager - Multiple Stored XSS

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The flaw does not properly neutralize input during a web page generation. The recommendation is to update an impacted device to firmware build 10.12.0.2100 or later. Customers can receive the...

HP Advance Mobile Application – Potential Information Disclosure

HP Advance Mobile Applications for iOS and Android are potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices. Update your application...

HP LIFE Android Mobile – Potential Escalation of Privilege, Information Disclosure

HP LIFE Android Mobile application is potentially vulnerable to escalation of privilege and/or information disclosure. Update your application...