CVE-2026-12555CWE-379

CVE-2026-12555

published August 24, 2026

CVSS
7.7
EPSS
0%
Percentile
28.8
In the wild
Unconfirmed
What it is

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.

The record
Technical detail
CVSS
7.7 · NONE
CVSS v4.0
7.7 · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00362 · 28.8th percentile
Weakness
CWE-379 · Creation of Temporary File in Directory with Insecure Permissions
Published
2026-08-24T20:16Z
References (2)
https://ciphersecuritylabs.com/papers/rooted-in-trust-breaking-hp-easy-starts-macos-privilege-boundaries/ · [email protected]https://support.hp.com/us-en/document/ish_15512340-15512362-16/hpsbpi04124 · [email protected]
EPSS history
Timeline
  • 26 AUG 07:31Z
    EPSS moved — → 0%
    epss
  • 24 AUG 16:00Z
    HP Easy Start for macOS - Security Update
    cvelistv5