Samsung Print Service Plugin – Potential Information Disclosure

Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices. HP is releasing updates to mitigate these potential vulnerabilities. Update your application...

Insyde BIOS SMM Memory Corruption Security Update

A potential security vulnerability has been identified in certain HP PC products using Insyde BIOS InsydeH20 UEFI Firmware, which might allow arbitrary code execution. Insyde has released mitigation for the potential vulnerability. HP has identified affected platforms and corresponding SoftPaqs...

HP System Event Utility – Denial of Service

HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was remediated with HP System Event Utility version 3.2.16. HP has identified affected versions and the minimum version v3.2.16 or higher that mitigates the potential...

AMD Graphics Driver February 2026 Security Update

AMD has informed HP of potential vulnerabilities in some AMD Graphics Driver for Windows, which might allow arbitrary code execution, loss of confidentiality, loss of integrity, loss of availability, kernel memory corruption, denial of service, or information disclosure. AMD is releasing software...

HP System Event Utility and Omen Gaming Hub – Potential Arbitrary Code Execution

HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths. This potential vulnerability was remediated with HP System Event Utility version 3.2.12 and Omen Gaming Hub version 1101.2511.101.0. Update to the latest version of HP System Even...

HP Card Readers (B Models) – Potential Information Disclosure

The following HP Card Readers B Models X3D03B & Y7C05B are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device such as a smartphone/smartwatches is in proximity during a card swipe event. HP has determin...

NVIDIA GPU Display Driver October 2025 Security Update

NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA® GPU Display Driver for Windows, which might allow denial of service, escalation of privileges, data tampering, code execution, or information disclosure. NVIDIA has released updates to mitigate these...

AMD Embedded Processors Security Update

AMD has informed HP of potential vulnerabilities in some AMD Embedded Processors and AMD Chipset Driver for the embedded processors, which might allow arbitrary code execution, denial of service, loss of integrity, loss of availability, or loss of confidentiality. AMD has released firmware and...

Elan Fingerprint Sensor Security Update

A potential vulnerability has been identified in certain HP PC products using Elan fingerprint sensor devices, which might allow operating system authentication bypass by spoofing. HP is releasing BIOS and fingerprint sensor driver updates to address the potential vulnerability. Elan has resolved...

Intel Extreme Tuning Utility (XTU) February 2025 Security Update

Intel has informed HP of a potential security vulnerability in the Intel® Extreme Tuning Utility Intel® XTU software, which might allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential...

NVIDIA GPU Display Driver July 2024 Security Update

NVIDIA has informed HP of a potential security vulnerability identified in the NVIDIA® GPU Display Driver for Windows, which might allow code execution, denial of service, escalation of privilege, information disclosure, and data tampering. NVIDIA has released updates to mitigate the vulnerabilit...

Intel Connectivity Performance Suite Installer August 2024 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Connectivity Performance Suite software installers, which might allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the...

Clariti Manager – Privilege Escalation Through Sudo

A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware flaw does not properly implement access controls. The recommendation is to update an impacted device to firmware build 10.12.0.2100 or later. Customers will receive the latest build...

HPSBPI02263 SSRT3512 rev.2 - Re-release of HPSBMI0002 HP Jetdirect, Remote Unauthorized Access, Denial of Service (DoS)

Potential Security Impact Remote unauthorized access, Denial of Service DoS VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP Jetdirect. The vulnerability could be exploited to allow remote unauthorized access or to create a Denial of Service DoS. RESOLUTION HP...

Poly Voice Devices (CCX, Trio, Edge E) – Potential Denial of Service

The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data. HP is releasing updates to mitigate these potential vulnerabilities. Poly IP phones should only connect to SIP servers using a secure connection by...

Certain HP OfficeJet Pro Printers – Denial of Service

Certain HP OfficeJet Pro printers may be vulnerable to potential denial of service when the IPP requests are mishandled, failing to establish a TCP connection. Update your printer firmware...

HP Image Assistant - Potential Escalation of Privilege

A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability could potentially allow a local attacker to escalate privileges via a race condition when installing packages. HP has identified affected versions and the minimum version th...

Insyde UEFI Digital Certificate Injection

A potential security vulnerability has been identified in certain HP PC products using Insyde BIOS InsydeH20 UEFI Firmware, which might allow escalation of privilege, arbitrary code execution, denial of service, and/or information disclosure. Insyde is releasing mitigation for the potential...

HP Sure Start IFD Protection - BIOS Security Update

A potential security vulnerability has been identified in HP Sure Start’s protection of the Intel Flash Descriptor in certain HP PC products, which might allow security bypass, arbitrary code execution, loss of integrity or confidentiality, or denial of service. HP is releasing BIOS updates to...

Certain HP DesignJet products – Information disclosure

Certain HP DesignJet products may be vulnerable to information disclosure though printer's web interface allowing unauthenticated users to view sensitive print job information. HP has provided an updated firmware resolution for potentially affected products listed in the table below...

HP Support Assistant – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion. HP has identified affected versions and the minimum version that mitigates the potential vulnerability. See the affected product...

Intel 2024.4 IPU - Processor February 2025 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Processors, which might allow denial of service. Intel is releasing microcode updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has identified affected...

HP Universal Print Driver Series (PCL 6 and PostScript) - Potential Security Vulnerabilities

Potential vulnerabilities have been identified in HP Universal Print Driver Series PCL 6 and PostScript involving the following libraries: Update your version of the HP Universal Print Driver Series...

Intel Graphics Software November 2024 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Graphics software which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

Intel CST Software November 2024 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Context Sensing Technology Intel® CST software, which might allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel Context Sensing Service ICCS is used in HP Auto Lo...

AMD Ryzen Master Monitoring SDK November 2024 Security Update

AMD has informed HP of a potential vulnerability identified in the AMD Ryzen™ Master Monitoring SDK, which might allow arbitrary code execution. AMD has released software updates to mitigate the potential vulnerability. AMD has released updates to mitigate the potential vulnerability. HP has...

ROCA - Vulnerable RSA Generation: HP Trusted Platform Module (TPM) Accessory and Certain HP Enterprise Printer and MFP Products, Certain HP PageWide Printer and MFP Products with Standard TPM

A potential security vulnerability known as “ROCA: Vulnerable RSA Generation” has been identified with the RSA keys generated by the HP Trusted Platform Module TPM Accessory and printers equipped with a TPM. This vulnerability could potentially be exploited remotely to allow remote disclosure of...

HP One Agent Software – Security Update

Potential security vulnerabilities have been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privilege and/or denial of service. HP is releasing software updates to mitigate these potential vulnerabilities. Mitigation is available in HP Privacy...

NVIDIA Nano SSH Key Duplication

A potential security vulnerability has been identified in some HP ZGX Nano G1n AI Station products where identical SSH host keys were deployed during the manufacturing process prior to March 19th, 2026. Successful exploitation might lead to unauthorized code execution, privilege escalation, denia...

Realtek SD Card Reader Driver Security Update

Potential vulnerabilities have been identified in the HP PC products that are configured with certain Realtek SD card readers, which might allow escalation of privilege or information disclosure. Updated Realtek SD card reader drivers have been released for mitigation. Realtek has released update...

HyperX NGENUITY - Arbitrary Code Execution

HyperX NGENUITY software is potentially vulnerable to arbitrary code execution. HP is releasing updated software to address the potential vulnerability. Use the following steps to resolve potential vulnerabilities...

Poly Lens Desktop Application – Privilege Escalation

A vulnerability in the Poly Lens Desktop application running on the Windows platform might allow modifications to the filesystem, which might lead to SYSTEM level privileges being granted. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected products with...

Infineon TPM Reference Implementation Out-of-Bounds Read

Infineon has informed HP of a potential security vulnerability in reference code for TPM models used in certain HP PC products, which might allow information disclosure or denial of service of the TPM. Infineon is releasing firmware updates to mitigate the vulnerability. HP has identified affecte...

Certain Poly Devices – Path Traversal Vulnerability - Arbitrary File Access by Unauthorized User

A vulnerability was discovered in the firmware builds up to 8.2.1.0820 in certain Poly devices. The firmware flaw does not properly prevent path traversal and could lead to information disclosure. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected produc...

HP Anyware Agent for Linux – Potential Authentication Bypass

A potential vulnerability has been identified in HP Anyware Agent for Linux which might allow for authentication bypass, which might result in escalation of privilege. HP is releasing a software update to mitigate this potential vulnerability. Update your version of HP Anyware Agent for Linux to...

Certain Poly Video Conference Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself. The recommendation is to update an impacted devi...

Poly Voice – Potential Unauthorized Modification of WebUI using XSS Attack

The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected products with minimum versions that mitigate the potential vulnerabilities. See...

Certain HP DeskJet All In One (AIO) Devices – Potential Remote Code Execution & Potential Buffer Overflow

Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices WSD scan requests are improperly validated and handled by the MFP. As a temporary mitigation measure for the buffer overflow vulnerability,...

Certain Samsung MultiXpress Multifunction Printers Firmware – Potential Information Disclosure

Certain Samsung MultiXpress Multifunction Printers may be vulnerable to information disclosure, potentially exposing address book entries and other device configuration information through specific APIs without proper authorization. Update your printer firmware...

AMD AIM-T Manageability Software Security Update

AMD has informed HP of potential vulnerabilities in the AMD Integrated Management Technology AIM-T software, which might allow arbitrary code execution. AMD has released software updates to mitigate these vulnerabilities. AMD has released updates to mitigate this potential vulnerabilities. HP has...

Sound Research SECOMNService Escalation of Privilege

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities The Sound Research Effects Driver...

Poly Video and Voice Devices - Potential Arbitrary Code Execution

A vulnerability in the FreeType font library affects Poly Video and Voice devices that are on the Android platform. This might result in arbitrary code execution. HP has released updates to mitigate the potential vulnerabilities. HP has identified affected products with minimum versions that...

Intel PROSet/Wireless WiFi Software August 2025 Security Update

Intel has informed HP of a potential security vulnerability for some Intel® PROSet/Wireless WiFi Software for Windows, which might allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential...

AMD Transient Scheduler BIOS Security Update

AMD has informed HP of potential vulnerabilities identified in some AMD processors, which might allow loss of confidentiality. AMD is providing Platform Initialization PI firmware updates to mitigate this vulnerability. AMD has released updates to mitigate this potential vulnerabilities. HP has...

HP Universal Print Driver – Potential Denial of Service

HP Universal Print Driver is potentially vulnerable to denial of service due to buffer overflow in versions of UPD 7.4 or older e.g., v7.3.x, v7.2.x, v7.1.x, etc.. Update your printer software...

Certain Poly Trio & CCX Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly Trio and CCX devices. The vulnerability might allow an attacker to execute arbitrary code without requiring additional privileges. HP has identified affected products and corresponding firmware minimum versions that mitigate potential...

Intel Core Ultra Processors CNVi Security Update May 2025

Intel has informed HP of a potential security in the Intel® Integrated Connectivity I/O interface CNVi for some Intel® Core™ Ultra Processors, which might allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Intel has released updates to...

AMD Client UEFI Firmware – SMM Lock Bypass

AMD has informed HP of a potential security vulnerability identified in some AMD client platform firmware components, which might allow arbitrary code execution. AMD has released firmware updates to mitigate these vulnerabilities. AMD has released updates to mitigate this potential vulnerability...

Intel PROSet/Wireless Wi-Fi and Bluetooth November 2024 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® PROSet/Wireless Software, Intel® Killer™ Wi-Fi and Intel® Wireless Bluetooth®, which might allow denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities...

HP BIOS - EDK II Reference Vulnerabilities

Potential EDK II reference code vulnerabilities have been identified in certain HP PC products using the HP System BIOS, which might allow arbitrary code execution. HP is releasing BIOS updates to mitigate these potential vulnerabilities. HP has identified affected platforms and corresponding...