Tera2 Zero Client and Remote Workstation Card Firmware – Service Location Protocol

A potential denial of service vulnerability has been identified in Tera2 Zero Client and Remote Workstation Card RWC Firmware when using Service Location Protocol SLP. HP is providing recommended guidance to mitigate this potential vulnerability. The Service Location Protocol SLP, RFC 2608 is...

UC Software - Missing Authorization

A potential vulnerability was discovered in certain Trio devices. An attacker with physical access to a device without administrator privileges can gain administrative access through the Poly Lens interface due to a potential authorization vulnerability. This is only possible for devices that are...

HP PC BIOS September 2023 Security Updates for OpenSSL

Potential vulnerabilities have been identified in the system BIOS of HP PCs using OpenSSL 1.1.1, which might allow denial of service. HP is releasing BIOS updates to OpenSSL 1.1.1s to mitigate these potential vulnerabilities. HP has identified affected platforms and corresponding SoftPaqs with...

Certain HP Enterprise LaserJet MFPs, HP Enterprise PageWide MFPs, HP Digital Sender - Stored cross site scripting (XSS)

Certain HP Enterprise LaserJet and PageWide MFPs may be vulnerable to stored cross site scripting XSS. Update your printer software...

HPSBHF03711 rev. 3 - HP Sure Sense - Elevation of Privilege

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Ammarit Thongthua, Nuttakorn Tungpoonsup, and Nattakit Intarasorn from Secure D Center Research Team VULNERABILITY SUMMARY HP has identified a potential security vulnerability in HP...

HPSBHF03706 rev. 2 - Intel Unite® Client November 2020 Security Updates

Potential Security Impact Escalation of Privilege, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel® VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in the Intel® Unite® Client and Cloud Service Client softwa...

HPSBHF03578 rev. 5 - Intel Graphics Driver - Pointer Dereference / Type Confusion in HECI Service

Potential Security Impact Elevation of Privilege Source: HP, HP Security Response Team PSIRT Reported by: Intel VULNERABILITY SUMMARY CVE-2017-5717: The Intel® Content Protection HECI Service has a Type Confusion vulnerability which potentially can lead to a privilege escalation. The HECI service...

HPSBHF3548 rev.2 - Linux Kernel Flaw, ASN.1 DER decoder for x509 certificate DER files

Potential Security Impact System downtime, or privilege escalation. Source:HP, HP Product Security Response Team PSRT Reported by: HP VULNERABILITY SUMMARY A flaw was found in the way the Linux kernel's ASN.1 DER decoder processed certain certificate files with tags of indefinite length. A local,...

HPSBPI02887 rev.3 - Certain HP LaserJet Pro Printers, Remote Information Disclosure

Potential Security Impact Remote information disclosure VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain HP LaserJet Pro printers. The vulnerability could be exploited remotely to gain unauthorized access to data. RESOLUTION HP has provided updated printer...

Intel Graphics Software August 2025 Security Update

Intel has informed HP of potential security vulnerabilities for some Intel® Graphics software, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

Intel Virtual RAID on CPU (VROC) February 2024 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Virtual RAID on CPU VROC software, which might allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

Intel Graphics Drivers November 2023 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Graphics drivers, which might allow escalation of privilege, denial of service and information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to...

HP Security Manager and Web Jetadmin - Potential remote code execution

HP Security Manager and Web Jetadmin may potentially be vulnerable to Remote Code Execution when using certain versions of Microsoft SQL Server Express. For additional information regarding the potential vulnerability and Microsoft SQL security patches for existing installations, please visit the...

HP PC BIOS October 2022 PCR Measurement Update

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability. Intel has released updates to mitigate the potential vulnerabilities. HP has identified...

HP Security Manager, Web Jetadmin, Digital Sending Software, and Easy Printer Manager - Potential XXE-based attacks

HP Security Manager, Web Jetadmin, Digital Sending Software, and Easy Printer Manager bundled in certain print driver packages may be vulnerable to potential XXE XML External Entity based attacks. HP has provided software updates to remediate the issue for the potentially affected products listed...

HP OfficeJet 7110 Wide Format ePrinter – Cross-Site Scripting (XSS)

A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross-Site Scripting XSS. Update your printer firmware...

HPSBPI03562 rev 1 - HP JetAdvantage Security Manager, Cross-site scripting, Denial of Service

Potential Security Impact HP JetAdvantage Security Manager, Cross-site scripting, Denial of service Reported by: HP VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with HP JetAdvantage Security Manager. The vulnerabilities could potentially be exploited to allow stor...

HPSBPI03555 rev. 2 - HP PageWide Printers, HP OfficeJet Pro Printers, Arbitrary Code Execution

Potential Security Impact Certain HP PageWide Pro printers and certain HP OfficeJet Pro printers, possible execution of arbitrary code. VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain HP printers. This vulnerability could potentially be exploited to execu...

HPSBGN3547 rev.2 - HP Device Manager, Remote Read Access to Arbitrary Files

Potential Security Impact Remote read access to arbitrary files. Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. dot dot in the...

HPSBHF03513 rev.2 - HP PCs and Workstations running Windows and Linux with NVIDIA Graphics Driver, Local Denial of Service (DoS), Elevation of Privilege

Potential Security Impact Denial of Service DoS, elevation of privilege VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with certain HP PCs and workstations with Windows and Linux running the NVIDIA Graphics Driver. The vulnerabilities could be locally exploited...

HPSBPI02869 SSRT100936 rev.4 - HP LaserJet MFP Printers, HP Color LaserJet MFP Printers, Certain HP LaserJet Printers, Remote Unauthorized Access to Files

Potential Security Impact Remote unauthorized access to files VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP LaserJet MFP printers, HP Color LaserJet MFP printers, and certain HP LaserJet printers. The vulnerability could be exploited remotely to gain...

Intel NPU Driver May 2026 Security Update

Intel has informed HP of potential vulnerabilities identified in the Intel® NPU Drivers which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

HP Linux Imaging and Printing Software - Use of DSA Key

A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software documentation. This potential vulnerability is due to the use of a weak code signing key, Digital Signature Algorithm DSA. HP has identified affected versions and the minimum software version that...

Certain HP LaserJet Pro Printers – Potential Denial of Service

Certain HP LaserJet Pro printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer via IPP Internet Printing Protocol. Update your printer firmware...

Intel Arc™ & Iris® Xe Graphics Software May 2024 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Arc™ & Iris® Xe Graphics software which may allow escalation of privilege. Intel is releasing updates to mitigate the potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has...

Intel® Virtual RAID on CPU (VROC) August 2023 Security Updates

Intel has informed HP of a potential security vulnerability identified in the Intel® Virtual RAID on CPU VROC software, which might allow escalation of privilege. Intel is releasing software updates to mitigate the potential vulnerability. Intel has released updates to mitigate the potential...

AMD Client UEFI DXE Driver Memory Leaks September 2023 Security Update

AMD has informed HP of potential vulnerabilities identified in some AMD client platform firmware components, which might allow denial of service or information disclosure. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has released updates to mitigate the potential...

Certain HP LaserJet, PageWide Pro Print Products - Potential Heap Overflow, Remote Code Execution

Certain HP LaserJet and PageWide Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution. Update the printer firmware...

Certain HP LaserJet, LaserJet Managed, PageWide, PageWide Managed printers - Potential buffer overflow

Certain HP LaserJet, HP LaserJet Managed, HP PageWide, and HP PageWide Managed products may be vulnerable to potential buffer overflow. Update your printer firmware...

Intel BSSA DFT July 2021 Security Update

Intel has informed HP of a potential security vulnerability identified in the Intel BSSA DFT feature which may allow escalation of privilege. Firmware updates are being released to mitigate this potential vulnerability. Intel has released guidance to mitigate the potential vulnerability. HP has...

HPSBHF03698 rev. 2 - Intel® Thunderbolt™ DCH Drivers November 2020 Security Updates

Potential Security Impact Escalation of Privilege, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in some Intel® Thunderbolt™ DCH drivers for Windows which ma...

HPSBHF03675 rev. 1 - Synaptics® Fingerprint Drivers that use SGX

Potential Security Impact Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT Reported By: Synaptics ® VULNERABILITY SUMMARY Synaptics has notified HP of a potential security vulnerability in certain versions of Synaptics Fingerprint Sensor Drivers using Intel® Software...

HPSBPI03660 rev. 1 - HP Inkjet Printers Account Lockout Issue

Potential Security Impact Account lockout bypass Source: HP, HP Product Security Response Team PSRT Reported by: Alexander Drabek, Logically Secure Limited VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP Printers and All-in-Ones that would allow bypassi...

HPSBGN03623 rev. 1 - Exposure of Application Configuration Details - Samsung Mobile Print (Android)

Potential Security Impact Application's configuration details exposed Source: HP, HP Product Security Response Team PSRT Reported by: Akshay Jain Appknox VULNERABILITY SUMMARY A potential security vulnerability caused by incomplete obfuscation of application configuration information. HP has no...

HPSBHF03560 rev 1 - Possible Elevation of Privilege and Information Disclosure via Intel® Software Guard Extensions (Intel® SGX) Vulnerability

Potential Security Impact Elevation of privilege, information disclosure Source: Intel Reported by: Intel VULNERABILITY SUMMARY Intel has discovered a vulnerability that could impact the security of Intel® Software Guard Extensions Intel® SGX. Before exploiting this vulnerability, the malicious...

HPSBPI02938 rev.2 - Certain HP LaserJet Printers, Remote Denial of Service (DoS)

Potential Security Impact Remote Denial of Service DoS VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain HP LaserJet Printers. The vulnerability could be exploited remotely resulting in a Denial of Service DoS. RESOLUTION HP has provided firmware updates fo...

AMD Processors May 2026 Security Update

AMD has informed HP of potential vulnerabilities in some AMD Processors which might allow escalation of privileges, denial of service, and loss of confidentiality, integrity, or availability. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has released updates to mitigate...

AMI BIOS SMM Security Update

A potential security vulnerability has been identified in certain HP PC products using AMI BIOS, which might allow arbitrary code execution. HP has released mitigation for the potential vulnerability. HP has identified affected platforms and corresponding SoftPaqs with minimum versions that...

Intel Graphics Driver and Software May 2025 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® Graphics Driver software, which might allow escalation of privilege, denial of service, or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates...

Intel 2024.3 IPU – Chipset Firmware Security Update

Intel has informed HP of potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Intel® Active Management Technology AMT, Intel® Standard Manageability, Intel® PROSet/Wireless and Intel® Killer™ Wi-Fi software, which might allow escalation of privilege, deni...

Insyde BIOS June 2024 EDK II Reference Vulnerabilities

Potential EDK II reference code vulnerabilities have been identified in certain HP PC products using Insyde BIOS Insyde H20 UEFI Firmware, which might allow arbitrary code execution. Inysde has released updates to mitigate the potential vulnerabilities. Insyde has released updates to mitigate the...

Intel Graphics Command Center Service Software May 2024 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Graphics Command Center Service software bundled in some Intel® Graphics Windows DCH driver software, which might allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability...

Certain HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Buffer Overflow

Certain HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to buffer overflow when using libwebp in Google Chrome or other web browsers. This issue occurs in all versions of libwebp prior to 1.3.2. Update your printer firmware...

UC Software – Unverified Password Change

A potential vulnerability was discovered in certain Poly devices. An attacker who can take over a web server session can also change the administrator password without knowledge of the current password due to an improper authentication check. HP recommends that customers disable the web server an...

AMI UEFI Firmware June 2023 Security Update (TOCTOU)

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in certain HP PC products using AMI UEFI Firmware system BIOS, which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability. AMI has released updates to mitigate the...

HPSBHF03717 rev. 3 - Intel® Ethernet Controllers February 2021 Security Updates

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in some Intel® Ethernet Controllers which may allow denial of service. Intel is releasing...

HPSBHF03714 rev. 1 - Intel® XMM™ 7360 Cell Modem February 2021 Security Update

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® XMM™ 7360 Cell Modem that might allow denial of service. Intel is releasing...

HPSBHF03692 rev. 1 - AMD® Radeon™ Graphics Driver D3DKMTCreateAllocation Handler Denial of Service

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: AMD VULNERABILITY SUMMARY AMD has informed HP of a potential security vulnerability identified in the AMD® Radeon™ Graphics Drivers for Windows which may allow denial of service. For detail...

HPSBGN03625 rev.1 - HP Touchpoint Analytics Execution of Arbitrary Code

Potential Security Impact Execution of arbitrary code. Source: HP, HP Product Security Response Team PSRT Reported by: Peleg Hadar SafeBreach Labs VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain versions of HP Touchpoint Analytics prior to version...

HPSBHF03576 rev. 3 - Intel AMT MEBx Bypass

Potential Security Impact Elevation of Privilege/Information Disclosure. Reported by: F-Secure, Google VULNERABILITY SUMMARY Un-provisioned Intel® vPro™ platforms containing Intel® Active Management Technology Intel® AMT are vulnerable to unauthorized local provisioning via physical access. The...