CVE-2026-12556CWE-319

CVE-2026-12556

published August 24, 2026

CVSS
7.7
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.

The record
Technical detail
CVSS
7.7 · NONE
CVSS v4.0
7.7 · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00243 · 14.7th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-08-24T20:16Z
References (2)
https://ciphersecuritylabs.com/papers/rooted-in-trust-breaking-hp-easy-starts-macos-privilege-boundaries/ · [email protected]https://support.hp.com/us-en/document/ish_15512340-15512362-16/hpsbpi04124 · [email protected]
EPSS history
Timeline
  • 26 AUG 07:31Z
    EPSS moved — → 0%
    epss
  • 24 AUG 16:01Z
    HP Easy Start for macOS - Security Update
    cvelistv5