HPSBPI03720 rev. 1 - Software Vulnerability with Certain HP OfficeJet and PageWide Solutions

Potential Security Impact Local Code Execution Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY HP has identified a security vulnerability with the I.R.I.S. OCR Optical Character Recognition software available with HP PageWide and OfficeJet printer software installations...

Intel® PROSet/Wireless WiFi and Killer™ Driver February 2021 Security Update

Intel has informed HP of a potential security vulnerability identified in some Intel® PROSet/Wireless WiFi and Killer™ drivers for Windows 10 which may allow information disclosure or denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Intel has releas...

HPSBHF03719 rev. 3 - Intel® Graphics Drivers February 2021 Security Update

Potential Security Impact Escalation of Privilege, Denial of Service, and Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerabilities identified in some Intel® Graphics Drivers whi...

HPSBHF03716 rev. 3 - Intel® Ethernet I210 Controller February 2021 Security Update

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in the Intel® Ethernet I210 Controller series of network adapters which may allow denial o...

HPSBHF03718 rev. 3 - Intel® PROSet/Wireless WiFi and Killer™ Driver February 2021 Security Update

Potential Security Impact Information Disclosure, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in some Intel® PROSet/Wireless WiFi and Killer™ drivers for Window...

HPSBHF03717 rev. 3 - Intel® Ethernet Controllers February 2021 Security Updates

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in some Intel® Ethernet Controllers which may allow denial of service. Intel is releasing...

HPSBHF03714 rev. 1 - Intel® XMM™ 7360 Cell Modem February 2021 Security Update

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® XMM™ 7360 Cell Modem that might allow denial of service. Intel is releasing...

HPSBHF03713 rev. 1 - Intel® Extreme Tuning Utility (XTU) February 2021 Security Update

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® Extreme Tuning Utility XTU which may allow denial of service. Intel is...

HPSBHF03715 rev. 1 - Intel® Optane™ DC Persistent Memory Software February 2021 Security Update

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® Optane™ DC Persistent Memory installer for Windows Server 2019 which m...

HPSBHF03712 rev. 3 - Sound Research DCHU Software Escalation of Privilege

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: HP VULNERABILITY SUMMARY A potential security vulnerability has been identified in the Sound Research DCHU software modules which can allow escalation of privilege. RESOLUTION Sound...

HPSBHF03711 rev. 3 - HP Sure Sense - Elevation of Privilege

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Ammarit Thongthua, Nuttakorn Tungpoonsup, and Nattakit Intarasorn from Secure D Center Research Team VULNERABILITY SUMMARY HP has identified a potential security vulnerability in HP...

HPSBHF03710 rev. 6 - NVIDIA GPU Display Driver January 2021 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, and Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY NVIDIA has informed HP of potential security vulnerabilities in the NVIDIA GPU Display Driver and Software...

HPSBPI03709 rev. 1 - Certain HP and Samsung-branded Print Products - IPv6 Network Stack Vulnerability

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY HP has identified a potential security vulnerability with the IPv6 network stack of certain HP and Samsung branded printers that could result in a denial of service. RESOLUTION HP ...

HPSBPI03708 rev. 1 - HP Print and Scan Doctor - Local Elevation of Privilege

Potential Security Impact Local Elevation of Privilege VULNERABILITY SUMMARY HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege. RESOLUTION HP has provided updated software, listed in the table below. To obtain the updated software: 1. Go to HP Print and Scan...

HPSBHF03707 rev. 1 - AMD® Ryzen Master™ Driver October 2020 Security Update

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported by: AMD VULNERABILITY SUMMARY AMD has informed HP of a potential security vulnerability identified in the AMD® Ryzen Master™ Driver which might allow escalation of privileges. For detaile...

HPSBHF03703 rev. 4 - Intel® 2020.2 IPU - CSME, SPS, TXE, AMT, and DAL Security Update

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in Intel® Converged Security and...

HPSBHF03704 rev. 3 - AMD® Firmware TPM November 2020 Security Update

Potential Security Impact Escalation of Privilege, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: AMD VULNERABILITY SUMMARY AMD has informed HP of a potential security vulnerability identified in the AMD Firmware TPM which may allow escalation of privilege...

HPSBHF03705 rev. 6 - BIOS November 2020 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: HP, Intel VULNERABILITY SUMMARY Intel® has informed HP of potential security vulnerabilities identified in Intel® Processors, BIOS Firmware...

HPSBHF03698 rev. 2 - Intel® Thunderbolt™ DCH Drivers November 2020 Security Updates

Potential Security Impact Escalation of Privilege, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in some Intel® Thunderbolt™ DCH drivers for Windows which ma...

HPSBHF03697 rev. 2 - Intel® PROSet/Wireless WiFi Software November 2020 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in some Intel® PROSet/Wireless WiFi products which may allow...

HPSBHF03701 rev. 2 - Intel® Ethernet 700 Series Controller November 2020 Security Update

Potential Security Impact Escalation of Privilege, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in the Intel® Ethernet 700 Series Controllers which might allow...

HPSBHF03699 rev. 2 - Intel® High Definition Audio Driver November 2020 Security Update

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in some Intel® High Definition Audio drivers which may allow escalation of privilege...

HPSBHF03702 rev. 4 - Intel® Solid State Drive (SSD) November 2020 Security Updates

Potential Security Impact Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in multiple Intel® Solid State Drive SSD products which may allow information...

HPSBHF03700 rev. 1 - Intel® Wireless Bluetooth® November 2020 Security Update

Potential Security Impact Escalation of Privilege, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in Intel® Wireless Bluetooth® products which might allow escalati...

HPSBHF03696 rev. 1 - Intel® Extreme Tuning Utility (XTU) November 2020 Security Update

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Intel® VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® Extreme Tuning Utility XTU which may allow escalation of privilege...

HPSBHF03706 rev. 2 - Intel Unite® Client November 2020 Security Updates

Potential Security Impact Escalation of Privilege, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel® VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in the Intel® Unite® Client and Cloud Service Client softwa...

HPSBHF03695 rev. 1 - Intel® HID Event Filter Driver November 2020 Security Update

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Intel® VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® Human Interface Device HID Event Filter Driver which may allow...

HPSBPI03693 rev. 1 - Certain HP OfficeJet Printers, Remote Denial of Service (DoS)

Potential Security Impact Denial of Service DOS Source: HP, HP Product Security Response Team PSRT Reported by: MT-SRG and VARAS VULNERABILITY SUMMARY HP has identified a potential security vulnerability with certain HP OfficeJet printers. The vulnerability could be exploited remotely to create a...

HPSBHF03692 rev. 1 - AMD® Radeon™ Graphics Driver D3DKMTCreateAllocation Handler Denial of Service

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: AMD VULNERABILITY SUMMARY AMD has informed HP of a potential security vulnerability identified in the AMD® Radeon™ Graphics Drivers for Windows which may allow denial of service. For detail...

HPSBHF03690 rev. 3 - NVIDIA GPU Display Driver September 2020 Security Updates

Potential Security Impact Escalation of Privilege, Code Execution, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY NVIDIA has informed HP of potential security vulnerabilities in the NVIDIA GPU Display Driver...

HPSBPI03691 rev. 1 - HP Linux Imaging and Printing Software - Potential Memory Buffer Overflow

Potential Security Impact Memory Buffer Overflow Source: HP, HP Product Security Response Team PSRT Reported by: Kevin Backhouse of GitHub Security Lab VULNERABILITY SUMMARY The HP Linux Imaging and Printing HPLIP software may potentially be affected by memory buffer overflow. RESOLUTION HP has...

HPSBHF03689 rev. 2 - HP Device Manager Weak Cipher Implementation, Remote Method Invocation, and Elevation of Privilege

Potential Security Impact Susceptibility to dictionary attacks, unauthorized remote access to resources, and elevation of privilege. Source: HP, HP Product Security Response Team PSRT Reported By: Nick Bloor VULNERABILITY SUMMARY Potential vulnerabilities have been identified with certain version...

Certain HP Printers and MFP products - Cross-Site Scripting (XSS)

A potential security vulnerability has been identified for certain HP printers and MFPs. In jQuery versions before 3.5.0, passing HTML from untrusted sources may execute untrusted code. Update your printer firmware...

HPSBPI03688 rev. 1 - Certain HP Printer and MFP products - Cross-Site Scripting (XSS)

Potential Security Impact Cross-site Scripting XSS Source: HP, HP Product Security Response Team PSRT Reported by: The jQuery Foundation VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP printers and MFPs. In jQuery versions before 3.5.0, passing HTML fro...

HPSBPI03687 rev. 3 - Certain HP LaserJet Printer and MFP Products and JetDirect Print Server Products - Information Disclosure

Potential Security Impact Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: Broadcom VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP printers and MFPs. A Broadcom wireless vulnerability known as "Kr00k" CVE-2019-1512...

HPSBPI03686 rev. 1 - Certain HP Enterprise MFP products: Elevation of Privilege

Potential Security Impact Elevation of privilege Source: HP, HP Product Security Response Team PSRT Reported by: HP VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP multifunction printers MFPs. The vulnerability may lead to elevation of privilege when...

HPSBHF03694 rev. 1 - AMD® Radeon™ Graphics Driver D3DKMTEscape Handler Denial of Service

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported by: AMD VULNERABILITY SUMMARY AMD has informed HP of a potential security vulnerability identified in the AMD® Radeon™ Graphics Drivers for Windows which may allow denial of service. For detail...

HPSBHF03684 rev. 2 - Intel® BIOS September 2020 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Intel. VULNERABILITY SUMMARY Intel® has informed HP of potential security vulnerabilities identified in BIOS firmware for multiple Intel®...

HPSBHF03685 rev. 2 - Intel® AMT and Intel® ISM September 2020 Security Updates

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Intel® VULNERABILITY SUMMARY Intel® has informed HP of potential security vulnerabilities identified in the Intel® Active Management Technology AMT and Intel® Standard Manageability I...

HPSBHF03681 rev. 2 - Intel® Graphics Drivers August 2020 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities in some Intel® Graphics Drivers which may allow escalation of privilege and/...

HPSBHF03680 rev. 1 - Intel® PROSet/Wireless WiFi Software August 2020 Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability in some Intel® PROSet/Wireless WiFi software which may allow escalation of...

HPSBHF03679 rev. 2 - Intel® Wireless Bluetooth August 2020 Security Updates

Potential Security Impact Denial of Service, Information Disclosure, Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities in some Intel® Wireless Bluetooth® software which ma...

HPSBHF03678 rev. 2 - GRUB2 Bootloader Arbitrary Code Execution

Potential Security Impact Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT Reported By: Eclypsium, Inc. VULNERABILITY SUMMARY HP has been informed of a potential security vulnerability in GRUB2 bootloaders commonly used by Linux. This vulnerability, known as “There’s a...

HPSBHF03677 rev. 1 - ALPS ALPINE Touchpad Driver Security Update

Potential Security Impact Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT Reported By: ALPS ALPINE VULNERABILITY SUMMARY ALPS ALPINE has informed HP of a potential security vulnerability with the ALPS ALPINE Touchpad Driver for Windows, which may allow a local attacker...

HPSBHF03675 rev. 1 - Synaptics® Fingerprint Drivers that use SGX

Potential Security Impact Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT Reported By: Synaptics ® VULNERABILITY SUMMARY Synaptics has notified HP of a potential security vulnerability in certain versions of Synaptics Fingerprint Sensor Drivers using Intel® Software...

HPSBHF03674 rev. 1 - Synaptics® VFS75xx Fingerprint Sensors Equipped with External Flash

Potential Security Impact Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported By: Synaptics® VULNERABILITY SUMMARY Synaptics has notified HP of a potential security vulnerability in certain versions of VFS75xx Fingerprint Sensors equipped with external flash, which...

HPSBHF03673 rev. 4 - AMD® SMM Callout Privilege Escalation

Potential Security Impact Execution of Arbitrary Code Source: AMD Reported By: AMD VULNERABILITY SUMMARY A potential security vulnerability in AMD® software technology has been identified that, in the case of privileged physical or administrative access, an attacker could potentially manipulate...

HPSBHF03672 rev. 2 - NVIDIA GPU Display Driver June 2020 Security Updates

Potential Security Impact Escalation of Privilege, Code Execution, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported By: NVIDIA VULNERABILITY SUMMARY NVIDIA has informed HP of potential security vulnerabilities in the NVIDIA GPU Display Driver...

HPSBHF03671 rev.1 - HP lt4120 Snapdragon X5 LTE Driver Installer Escalation of Privilege

Potential Security Impact Escalation of Privilege, Arbitrary Code Execution Source: HP, HP Product Security Response Team PSRT Reported by: TBD VULNERABILITY SUMMARY A potential security vulnerability has been identified with the installation package for the HP lt4120 Snapdragon X5 LTE Driver pri...

HPSBPI03666 rev. 3 - Certain HP and Samsung-branded Print Products - Network Stack Potential Vulnerabilities

Potential Security Impact Remote Code Execution, Denial of Service, and Multiple other Potential Vulnerabilities VULNERABILITY SUMMARY Multiple potential vulnerabilities may exist in the Treck Inc. networking stack used in certain HP and Samsung-branded printers. These may include, but not be...