Intel 2023.3 IPU – BIOS August 2023 Security Updates

Intel has informed HP of potential vulnerabilities identified for some Intel® Processors and/or supporting BIOS firmware, which might allow escalation of privilege, information disclosure, or denial of service. Intel is releasing firmware updates and prescriptive guidance to mitigate these...

Insyde Firmware Utility December 2021 Security Updates

HP has been informed of potential security vulnerabilities identified in the Insyde UEFI firmware update utility used by certain HP PC products which may allow escalation of privilege, denial of service, or information disclosure via local access. HP is releasing SoftPaq updates with mitigation f...

HPSBHF03700 rev. 1 - Intel® Wireless Bluetooth® November 2020 Security Update

Potential Security Impact Escalation of Privilege, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in Intel® Wireless Bluetooth® products which might allow escalati...

HPSBHF03608 rev. 3 - Intel Graphics Drivers Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, and Information Disclosure VULNERABILITY SUMMARY Potential security vulnerabilities in Intel® Graphics Driver for Windows have been identified which could allow users to potentially escalate privileges, disclose information or...

HPSBHF03374 rev.1 - HP PCs with UEFI Firmware, Denial of Service

Potential Security Impact Denial of service VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with certain HP consumer notebook PCs, HP commercial notebook PCs, HP consumer desktop PCs, HP commercial workstation PCs, Retail Solutions and Thin Clients with UEFI Firmware...

Intel Chipset Device Software November 2023 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Chipset Device Software, which might allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has...

Intel 2023.1 IPU – BIOS February 2023 Security Updates

Intel has informed HP of potential vulnerabilities identified in some Intel® Processors with Intel® Software Guard Extensions SGX that might allow information disclosure and potential vulnerabilities in the BIOS firmware and Intel® Trusted Execution Technology TXT Secure Initialization SINIT...

Certain HP Printers may be vulnerable to 3DES Sweet32 Vulnerability

A recent firmware release, specifically FutureSmart 3.9.10, altered the cipher suite prioritization list placing the 3DES cipher into the HIGH prioritization cipher list. By default, this version 3.9.10 enables 3DES which is a “weak” cipher and may potentially allow the “Sweet32” vulnerability to...

Privilege escalation in HP Support Assistant

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up. HP strives to...

HPSBHF03636 rev. 4 - Intel 2019.2 IPU Graphics Driver Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, or Information Disclosure Source: Intel, HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple security vulnerabilities have been identified by Intel. Intel is releasing Intel® Graphics...

Intel Dynamic Tuning Technology (DTT) Software May 2024 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Dynamic Tuning Technology DTT software installer which might allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the...

Certain HP PC products using AMI BIOS – Buffer Overflow

A potential security vulnerability has been identified in certain HP PC products using AMI BIOS, which might allow arbitrary code execution. AMI has released firmware updates to mitigate this vulnerability. AMI has released updates to mitigate the potential vulnerability. HP has identified affect...

AMD Graphics Driver November 2023 Security Update

AMD has informed HP of potential vulnerabilities identified in some AMD Graphics Drivers for Windows, which might allow arbitrary code execution or denial of service. AMD has released updates to mitigate the potential vulnerabilities. HP has identified affected platforms and corresponding SoftPaq...

HP Security Manager - Potential Remote Code Execution and Denial of Service

HP Security Manager may be vulnerable to potential remote code execution and denial of service. Update your printer software...

NVIDIA® GPU Display Driver March 2023 Security Update

NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA® GPU Display Driver for Windows which might allow escalation of privilege, denial of service, and information disclosure. NVIDIA has released software updates to mitigate these vulnerabilities. NVIDIA has releas...

HPSBHF03594 rev. 4 - Intel Graphics Unified Shader Compiler

Potential Security Impact Elevation of Privilege / Denial of Service Source: Intel, HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple potential vulnerabilities in the User Mode driver components of the Intel Graphics Driver Unified Shader Compiler might...

NVIDIA GPU Display Driver February 2024 Security Update

NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA® GPU Display Driver for Windows, which might allow escalation of privilege, arbitrary code execution, denial of service, information disclosure. NVIDIA has released updates to mitigate these vulnerabilities...

HP LaserJet Pro Printer - Potential vulnerabilities to unauthorized configuration and denial of service

Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow an unauthorized user to reconfigure, reset, or create a Denial of Service on the device. Update your printer firmware...

HPSBHF03677 rev. 1 - ALPS ALPINE Touchpad Driver Security Update

Potential Security Impact Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT Reported By: ALPS ALPINE VULNERABILITY SUMMARY ALPS ALPINE has informed HP of a potential security vulnerability with the ALPS ALPINE Touchpad Driver for Windows, which may allow a local attacker...

HPSBHF03642 rev. 2 - HP ThinPro Linux Information Disclosure and Privilege Escalation

Potential Security Impact Information Disclosure, Privilege Escalation, and Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT Reported by: Eldar Marcussen - xen1thLabs - Software Labs PSR-2019-0173, CVE-2019-16285, CVE-2019-16286, CVE-2019-16287, CVE-2019-18909,...

HPSBHF03617 rev. 4 - Intel UEFI System Firmware Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Multiple potential security vulnerabilities in Intel firmware that might allow for escalation of privilege or denial of service...

HPSBPI02656 SSRT090262 rev.2 - Certain HP Photosmart Printers, Remote Unauthorized Access, Cross Site Scripting (XSS)

Potential Security Impact Remote unauthorized access to data, cross site scripting XSS VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with certain HP Photosmart printers. These vulnerabilities could be exploited remotely for cross site scripting XSS or to gain...

HPSBPI02575 SSRT090255 rev.3 - HP LaserJet MFP Printers, HP Color LaserJet MFP Printers, Certain HP LaserJet Printers, Remote Unauthorized Access to Files

Potential Security Impact Remote unauthorized access to files VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP LaserJet MFP printers, HP Color LaserJet MFP printers, and certain HP LaserJet printers. The vulnerability could be exploited remotely to gain...

Intel UEFI Reference Firmware March 2026 Security Update

Intel has informed HP of a potential security vulnerability in UEFI for some Intel Reference Platforms, which might allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP h...

Intel Processor Firmware May 2026 Security Update

Intel has informed HP of a potential security vulnerability identified in some Intel® Processors, which might allow information disclosure. Intel is releasing microcode updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has...

HP ThinPro 8.1 SP8 Security Updates

Previous versions of HP ThinPro prior to HP ThinPro 8.1 SP8 could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities. All of the identified vulnerabilities listed above were addressed and fixed as part of...

Intel Thunderbolt Driver May 2024 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Thunderbolt driver software, which might allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP h...

HP Workstation BIOS Arbitrary Write Security Update

A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP is releasing mitigation for the potential vulnerability. HP has released updates to mitigate the...

AMD SMM Supervisor November 2023 Security Update

AMD has informed HP of a potential security vulnerability identified in some AMD processors which might allow arbitrary code execution. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has released updates to mitigate the potential vulnerability. HP has identified affected...

Intel 2023.3 IPU – Chipset Firmware August 2023 Security Update

Intel has informed HP of potential vulnerabilities identified in the Intel® Converged Security Management Engine CSME, Active Management Technology AMT, and Intel® Standard Manageability software that might allow escalation of privilege or denial of service. Intel is releasing updates to mitigate...

Intel® Virtual RAID on CPU (VROC) May 2023 Security Update

Intel has informed HP of potential security vulnerabilities in the Intel® Virtual RAID on CPU VROC software, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the...

HP PC BIOS February 2023 Security Update (TOCTOU)

Potential Time-of-Check to Time-of Use TOCTOU vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerabilities. HP has...

HP Workstation BIOS February 2022 Security Update

A potential security vulnerability has been identified in certain HP Workstation BIOS UEFI firmware which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability. HP has identified affected platforms and corresponding SoftPaqs with minimum versions...

OMEN Gaming Hub Escalation of Privilege and Denial of Service for Certain OMEN PCs

Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing software updates to mitigate the potential vulnerabilities. HP has identified affected platforms and corresponding SoftPaqs...

2021.1 IPU - Intel® CSME, SPS and LMS Security Updates

Intel has informed HP of potential security vulnerabilities in the Intel® Converged Security and Manageability Engine CSME, Server Platform Services SPS, and Intel® Local Manageability Service Intel® LMS which may allow escalation of privilege or information disclosure. Intel is releasing firmwar...

HPSBHF03672 rev. 2 - NVIDIA GPU Display Driver June 2020 Security Updates

Potential Security Impact Escalation of Privilege, Code Execution, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY NVIDIA has informed HP of potential security vulnerabilities in the NVIDIA GPU Display Driver...

HPSBPI02728 SSRT100692 rev.7 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default

Potential Security Impact Remote firmware update enabled by default VULNERABILITY SUMMARY In November, 2011, a potential security vulnerability was identified with certain HP printers and HP digital senders. The vulnerability could be exploited remotely to install unauthorized printer firmware...

Intel 2025.1 IPU – BIOS February 2025 Security Update

Intel has informed HP of potential security vulnerabilities in firmware for some Intel® Processors, which might allow escalation of privilege, denial of service, or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates ...

AMD Client UEFI Firmware November 2022 Security Update

AMD has informed HP of potential vulnerabilities identified in AMD client platform firmware components, which might allow escalation of privilege and arbitrary code execution. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has released updates to mitigate the potential...

HPSBHF03657 rev. 3 - NVIDIA GPU Display Driver February 2020 Security Updates

Potential Security Impact Denial of Service, Escalation of Privileges, Code Execution, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY NVIDIA has informed HP of potential security vulnerabilities in the NVIDIA GPU Display Driver...

HPSBHF03631 rev. 6 - BIOS Privilege Elevation Vulnerability

Potential Security Impact Elevation of privilege Source: HP, HP Product Security Response Team PSRT Reported by: yngwei @yngweijw of IIE VARAS, MengHao, Li of IIE VARAS and driedfish @d3af1sh of IIE VULNERABILITY SUMMARY A potential security vulnerability has been identified which involves possib...

Qualcomm WLAN October 2023 Security Update

Potential vulnerabilities were identified in the Qualcomm WLAN Driver for certain HP PC products, which might allow arbitrary code execution or information disclosure. Qualcomm has released updates to mitigate the potential vulnerabilities. HP has identified affected platforms and corresponding...

Certain HP Print Products, Digital Sending products - Potential denial of service vulnerability

Certain HP Print and Digital Send products may potentially be vulnerable to a Denial of Service DOS attack when elliptical curve certificates are used. Update the printer software...

Intel® Graphics Drivers November 2021 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Graphics drivers which may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

HPSBHF03661 rev. 1 - HP Connection Optimizer Escalation of Privilege

Potential Security Impact Escalation of Privilege VULNERABILITY SUMMARY A potential security vulnerability in the HP Connection Optimizer driver may allow escalation of privilege. RESOLUTION HP has identified the affected platforms and target versions for SoftPaqs. See the affected platforms list...

HPSBHF03659 rev. 4 - Intel® Smart Sound Technology March 2020 Security Update

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a security vulnerability in the Intel® Smart Sound Technology which may allow an authenticated user to potentially enable escalati...

HPSBHF03645 rev. 3 - NVIDIA GPU Display Driver Vulnerabilities 2019

Potential Security Impact Denial of service, escalation of privilege, unauthorized code execution, or information disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY HP has been notified of potential security vulnerabilities with the GPU Displa...

HPSBPI03554 rev. 2 - Certain HP PageWide Pro printers and certain HP OfficeJet Pro printers, Denial of Service, possible execution of arbitrary code

Potential Security Impact Denial of Service, possible execution of arbitrary code VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain HP printers. This vulnerability could potentially be exploited to execute arbitrary code or create a denial of service. note:...

HP ThinPro 8.1 SP4 Security Updates

Previous versions of HP ThinPro prior to HP ThinPro 8.1 SP4 could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP4, which includes updates to mitigate potential vulnerabilities. All the identified vulnerabilities listed above were addressed and fixed as part of the...

Intel® PROSet/Wireless and Killer™ Wi-Fi Software February 2024 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® PROSet/Wireless and Intel® Killer™ Wi-Fi software, which might allow escalation of privilege, information disclosure or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities...