HPSBHF03711 rev. 3 - HP Sure Sense - Elevation of Privilege

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Ammarit Thongthua, Nuttakorn Tungpoonsup, and Nattakit Intarasorn from Secure D Center Research Team VULNERABILITY SUMMARY HP has identified a potential security vulnerability in HP...

HPSBHF03661 rev. 1 - HP Connection Optimizer Escalation of Privilege

Potential Security Impact Escalation of Privilege VULNERABILITY SUMMARY A potential security vulnerability in the HP Connection Optimizer driver may allow escalation of privilege. RESOLUTION HP has identified the affected platforms and target versions for SoftPaqs. See the affected platforms list...

HPSBPI03643 rev. 1 - Certain HP Enterprise Printers and MFP products - Potential instability of solution

Potential Security Impact Potential instability of solution VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP printers and MFPs with Troy solutions. For affected printers with FutureSmart Firmware bundle version 4.9 or 4.9.0.1 the potential vulnerability...

HPSBHF3548 rev.2 - Linux Kernel Flaw, ASN.1 DER decoder for x509 certificate DER files

Potential Security Impact System downtime, or privilege escalation. Source:HP, HP Product Security Response Team PSRT Reported by: HP VULNERABILITY SUMMARY A flaw was found in the way the Linux kernel's ASN.1 DER decoder processed certain certificate files with tags of indefinite length. A local,...

HPSBPI02698 SSRT100404 rev.3 - HP Easy Printer Care Software Running on Windows, Remote Execution of Arbitrary Code

Potential Security Impact Remote execution of arbitrary code VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP Easy Printer Care Software Running on Windows. The vulnerability can be remotely exploited to write arbitrary files to the system and execute them via...

HP ThinPro 8.1 SP8 Security Updates

Previous versions of HP ThinPro prior to HP ThinPro 8.1 SP8 could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities. All of the identified vulnerabilities listed above were addressed and fixed as part of...

HP ThinPro 8.1 SP4 Security Updates

Previous versions of HP ThinPro prior to HP ThinPro 8.1 SP4 could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP4, which includes updates to mitigate potential vulnerabilities. All the identified vulnerabilities listed above were addressed and fixed as part of the...

Intel Ethernet Controller I225 May 2024 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Ethernet Controller I225 Manageability firmware which might allow escalation of privilege or denial of service. Intel released firmware and software updates to mitigate these potential vulnerabilities. Intel has released...

Intel Thunderbolt Driver May 2024 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Thunderbolt driver software, which might allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP h...

Intel® PROSet/Wireless and Killer™ Wi-Fi Software February 2024 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® PROSet/Wireless and Intel® Killer™ Wi-Fi software, which might allow escalation of privilege, information disclosure or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities...

HP Print and Scan Doctor for Windows - Potential Escalation of Privilege

HP Print and Scan Doctor for Windows may potentially be vulnerable to escalation of privilege. HP is releasing software updates to mitigate the potential vulnerability. The fix applies to HP Print and Scan Doctor for Windows application, which will be launched via the HP Support Assistant...

HP PC BIOS September 2023 Security Updates for OpenSSL

Potential vulnerabilities have been identified in the system BIOS of HP PCs using OpenSSL 1.1.1, which might allow denial of service. HP is releasing BIOS updates to OpenSSL 1.1.1s to mitigate these potential vulnerabilities. HP has identified affected platforms and corresponding SoftPaqs with...

Intel® Virtual RAID on CPU (VROC) May 2023 Security Update

Intel has informed HP of potential security vulnerabilities in the Intel® Virtual RAID on CPU VROC software, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the...

HP PC BIOS November 2022 Security Update for Potential Stack Buffer Overflow

A potential vulnerability has been identified in the system BIOS for certain HP PC products which might allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability. HP has identified affected platforms and corresponding SoftPaqs with...

Intel 2022.3 IPU - BIOS November 2022 Security Update

Intel has informed HP of potential security vulnerabilities in the BIOS firmware for some Intel® Processors which may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilitie...

Intel® Graphics Drivers November 2021 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Graphics drivers which may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

HPSBHF03718 rev. 3 - Intel® PROSet/Wireless WiFi and Killer™ Driver February 2021 Security Update

Potential Security Impact Information Disclosure, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in some Intel® PROSet/Wireless WiFi and Killer™ drivers for Window...

HPSBHF03699 rev. 2 - Intel® High Definition Audio Driver November 2020 Security Update

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in some Intel® High Definition Audio drivers which may allow escalation of privilege...

HP Security Manager - Multiple vulnerabilities

Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure. Update your printer software...

Intel® Thunderbolt™ Controller June 2021 Security Update

Intel has informed HP of potential security vulnerabilities identified in the Intel® Thunderbolt™ controllers which may allow denial of services. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilities. ...

HPSBHF03713 rev. 1 - Intel® Extreme Tuning Utility (XTU) February 2021 Security Update

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® Extreme Tuning Utility XTU which may allow denial of service. Intel is...

HPSBHF03664 rev. 3 - Intel® PROSet/Wireless WiFi Software April 2020 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities in some Intel PROSet/Wireless WiFi Software products may allow denial of...

HPSBHF03658 rev. 3 - Intel® Graphics Drivers March 2020 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has reported potential security vulnerabilities in Intel® Graphics Drivers for Windows which may allow...

HPSBHF03656 rev. 4 - Intel® Chipset Device Software INF Utility Security Update

Potential Security Impact Denial of Service. Source: HP, HP Product Security Response Team PSRT Reported by: Intel® VULNERABILITY SUMMARY HP has been notified of a potential security vulnerability in Intel® Chipset Device Software INF Utility that may allow denial of service via local access. Int...

HPSBHF03651 rev. 4 - Intel® CSME February 2020 Security Update

Potential Security Impact Escalation of Privilege, Denial of Service, and Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported by: Intel® VULNERABILITY SUMMARY HP has been notified of potential security vulnerabilities involving improper authentication with the Inte...

HPSBGN03605 rev.1 - HP Support Assistant DLL Loading Vulnerability

Potential Security Impact Execution of arbitrary code. Source: HP, HP Product Security Response Team PSRT Reported By: Marius Gabriel Mihai VULNERABILITY SUMMARY The vulnerability allows an unauthorized person to load arbitrary code. RESOLUTION Version 8.7.50.3 was released on December 11, 2018...

HPSBPI03562 rev 1 - HP JetAdvantage Security Manager, Cross-site scripting, Denial of Service

Potential Security Impact HP JetAdvantage Security Manager, Cross-site scripting, Denial of service Reported by: HP VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager. The vulnerabilities could potentially be exploited to allow stor...

NVIDIA GPU Display Driver June 2023 Security Updates

NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA® GPU Display Driver for Windows which might allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure. NVIDIA has released updates to mitigate these vulnerabilities...

Certain HP LaserJet Pro Print Products - Potential Buffer Overflow

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs. Update the printer firmware...

Qualcomm and Mediatek Wireless Bluetooth April 2022 Security Updates

Qualcomm® and Mediatek have informed HP of potential security vulnerabilities in their Bluetooth devices which may allow denial of service. Software updates have been released to mitigate the potential vulnerabilities. Qualcomm and Mediatek have released updates to mitigate the potential...

HP JetAdvantage Management Connector – Elevation of Privilege v.01

HP JetAdvantage Management Connector software is potentially vulnerable to Elevation of Privilege when repair of the MSI is invoked. Update your printer software...

HPSBHF03696 rev. 1 - Intel® Extreme Tuning Utility (XTU) November 2020 Security Update

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Intel® VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® Extreme Tuning Utility XTU which may allow escalation of privilege...

HPSBHF03690 rev. 3 - NVIDIA GPU Display Driver September 2020 Security Updates

Potential Security Impact Escalation of Privilege, Code Execution, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY NVIDIA has informed HP of potential security vulnerabilities in the NVIDIA GPU Display Driver...

HPSBHF03685 rev. 2 - Intel® AMT and Intel® ISM September 2020 Security Updates

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Intel® VULNERABILITY SUMMARY Intel® has informed HP of potential security vulnerabilities identified in the Intel® Active Management Technology AMT and Intel® Standard Manageability I...

HPSBHF03615 rev. 2 - Intel Graphics Drivers Security Updates

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Multiple potential security vulnerabilities in Intel® Graphics Driver for Windows may allow users to cause denial of service. RESOLUTION HP has identified the...

HPSBHF03576 rev. 3 - Intel AMT MEBx Bypass

Potential Security Impact Elevation of Privilege/Information Disclosure. Reported by: F-Secure, Google VULNERABILITY SUMMARY Un-provisioned Intel® vPro™ platforms containing Intel® Active Management Technology Intel® AMT are vulnerable to unauthorized local provisioning via physical access. The...

HP ThinPro 8.1 SP9 Security Updates

Previous versions of HP ThinPro prior to HP ThinPro 8.1 SP9 could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP9, which includes updates to mitigate potential vulnerabilities. All of the identified vulnerabilities listed above were addressed and fixed as part of ...

Intel Connectivity Performance Suite November 2023 Security Update

Intel has informed HP of a potential security vulnerability in the Intel® Connectivity Performance Suite software for some Intel® Wireless Products, which might allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates t...

HPSBHF03706 rev. 2 - Intel Unite® Client November 2020 Security Updates

Potential Security Impact Escalation of Privilege, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel® VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in the Intel® Unite® Client and Cloud Service Client softwa...

HPSBHF03602 rev. 4 - Synaptics Touchpad Driver for Windows Can Leak Freed Kernel Memory Pointers

Potential Security Impact Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Synaptics VULNERABILITY SUMMARY The Synaptics TouchPad driver can reveal freed kernel memory pointers through the driver API. This could be used by an unauthorized third party to weake...

HPSBHF03601 rev. 4 - Arbitrary Code Execution via Intel Smart Sound Technologies Driver

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY HP has been informed of potential security vulnerabilities in the Intel Smart Sound Technologies driver module prior to version 9.21.00.354. These...

HP PC BIOS Additional Security Update for TOCTOU

A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability. HP has...

Privilege escalation via HPSFViewer

HPSFViewer might allow Escalation of Privilege. This potential vulnerability was remediated on July 29th, 2022. Customers who opted for automatic updates should have already received the remediation. HP strives to address all security issues with HP apps at best possible speed and make the latest...

Intel® Ethernet Controllers August 2022 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Ethernet Controllers and Adapters which may allow denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilities. HP...

HP Smart App for Windows, HP Print and Scan Doctor - Elevation of privilege

HP Print and Scan Doctor, an application within the HP Smart App for Windows, is potentially vulnerable to local elevation of privilege. Update your printer software...

HPSBPI03653 rev. 1 - HP LaserJet Software Solution Elevation of Privilege for Certain HP LaserJet Printers

Potential Security Impact Elevation of privilege Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY A potential security vulnerability has been identified for HP LaserJet Solution Software for certain HP LaserJet Printers which may lead to unauthorized elevation of privilege...

HPSBGN03625 rev.1 - HP Touchpoint Analytics Execution of Arbitrary Code

Potential Security Impact Execution of arbitrary code. Source: HP, HP Product Security Response Team PSRT Reported by: Peleg Hadar SafeBreach Labs VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain versions of HP Touchpoint Analytics prior to version...

HPSBHF03597 rev. 3 - PortSmash Side-Channel Vulnerability

Potential Security Impact Information disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: Tampere University of Technology, Finland and Technical University, Cuba VULNERABILITY SUMMARY An industry-wide vulnerability has been reported which impacts CPUs that use Simultaneou...

HPSBPI02887 rev.3 - Certain HP LaserJet Pro Printers, Remote Information Disclosure

Potential Security Impact Remote information disclosure VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain HP LaserJet Pro printers. The vulnerability could be exploited remotely to gain unauthorized access to data. RESOLUTION HP has provided updated printer...

Intel PROSet/Wireless WiFi February 2025 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® PROSet/Wireless WiFi and Killer™ WiFi software products, which might allow information disclosure or denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Intel ha...