CVE-2026-12554CWE-1104

CVE-2026-12554

published August 24, 2026

CVSS
8.5
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.

The record
Technical detail
CVSS
8.5 · NONE
CVSS v4.0
8.5 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00210 · 11.2th percentile
Weakness
CWE-1104 · Use of Unmaintained Third Party Components
Published
2026-08-24T20:16Z
References (2)
https://ciphersecuritylabs.com/papers/rooted-in-trust-breaking-hp-easy-starts-macos-privilege-boundaries/ · [email protected]https://support.hp.com/us-en/document/ish_15512340-15512362-16/hpsbpi04124 · [email protected]
EPSS history
Timeline
  • 26 AUG 07:31Z
    EPSS moved — → 0%
    epss
  • 24 AUG 15:58Z
    HP Easy Start for macOS - Security Update
    cvelistv5