Hp vulnerabilities
Published CVEs affecting Hp products: 95 record(s), with severity, exploitation and fixes.
Linux Imaging And Printing 12Probook 440 G8 Firmware 11Pc Bios 11Support Assistant 10HP Linux Imaging and Printing Software (HPLIP) 10Prodesk 405 G6 Small Form Factor Firmware 6Elitebook 830 G6 Firmware 5Mp9 G4 Retail System Firmware 5Elite Dragonfly Firmware 5Elite X2 1013 G3 Firmware 5Engage Flex Mini Retail System Firmware 5Z6 G4 Workstation Firmware 5Elite Dragonfly Max Firmware 5Elite X2 G4 Firmware 5Elite Dragonfly G2 Firmware 5Z8 G4 Workstation Firmware 5Z4 G4 Workstation (core-x) Firmware 5Z1 G8 Tower Desktop Pc Firmware 5260 G3 Desktop Mini Pc Firmware 5Elitedesk 800 35w G4 Desktop Mini Pc Firmware 5Elitedesk 800 65w G4 Desktop Mini Pc Firmware 5Elitedesk 800 95w G4 Desktop Mini Pc Firmware 5Elitedesk 800 G4 Small Form Factor Pc Firmware 5Elitedesk 800 G4 Tower Pc Firmware 5Elitedesk 800 G4 Workstation Edition Firmware 5Elitedesk 800 G5 Desktop Mini Pc Firmware 5Elitedesk 800 G5 Small Form Factor Pc Firmware 5Elitedesk 800 G5 Tower Pc Firmware 5Elitedesk 800 G6 Desktop Mini Pc Firmware 5Elitedesk 800 G6 Small Form Factor Pc Firmware 5Elitedesk 800 G6 Tower Pc Firmware 5Elitedesk 800 G8 Desktop Mini Pc Firmware 5Elitedesk 800 G8 Small Form Factor Pc Firmware 5Elitedesk 800 G8 Tower Pc Firmware 5Elitedesk 805 G6 Desktop Mini Pc Firmware 5Elitedesk 805 G6 Small Form Factor Pc Firmware 5Elitedesk 805 G8 Desktop Mini Pc Firmware 5Elitedesk 805 G8 Small Form Factor Pc Firmware 5Elitedesk 880 G4 Tower Pc Firmware 5Elitedesk 880 G5 Tower Pc Firmware 5
CVE-2025-11998
Medium · 6.8
CWE-200 Oct 30, 2025
HP Card Readers (B Models) – Potential Information Disclosure
The following HP Card Readers B Models (X3D03B & Y7C05B) are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device (such as a smartphone/smartwatches) is in proximity during a card swipe event.
CVE-2025-43017
Critical · 9.8
CWE-250 Oct 28, 2025
HP ThinPro 8.1 SP8 Security Updates
HP ThinPro 8.1 System management application failed to verify user's true id. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities.
CVE-2025-43024
High · 7.5
CWE-497 Oct 27, 2025
HP ThinPro 8.1 SP8 Security Updates
A GUI dialog of an application allows to view what files are in the file system without proper authorization.
CVE-2025-10577
High · 8.5
CWE-266 Oct 15, 2025
Sound Research SECOMNService Escalation of Privilege
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities
CVE-2025-10576
High · 8.5
CWE-266 Oct 15, 2025
Sound Research SECOMNService Escalation of Privilege
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities.
CVE-2025-10578
High · 7.8
CWE-269 Oct 1, 2025
HP Support Assistant - Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.
CVE-2022-23934
High · 8.2
Mar 11, 2022
Potential vulnerabilities have been identified in the system BIOS of certain HP PC…
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23933
High · 8.2
Mar 11, 2022
Potential vulnerabilities have been identified in the system BIOS of certain HP PC…
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23932
High · 8.2
Mar 11, 2022
Potential vulnerabilities have been identified in the system BIOS of certain HP PC…
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23931
High · 8.2
Mar 11, 2022
Potential vulnerabilities have been identified in the system BIOS of certain HP PC…
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23930
High · 8.2
Mar 11, 2022
Potential vulnerabilities have been identified in the system BIOS of certain HP PC…
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23929
High · 8.2
Mar 11, 2022
Potential vulnerabilities have been identified in the system BIOS of certain HP PC…
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23928
High · 8.2
Mar 11, 2022
Potential vulnerabilities have been identified in the system BIOS of certain HP PC…
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23927
High · 8.2
Mar 11, 2022
Potential vulnerabilities have been identified in the system BIOS of certain HP PC…
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23926
High · 8.2
Mar 11, 2022
Potential vulnerabilities have been identified in the system BIOS of certain HP PC…
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23925
High · 8.2
Mar 11, 2022
Potential vulnerabilities have been identified in the system BIOS of certain HP PC…
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23924
High · 8.2
Mar 11, 2022
Potential vulnerabilities have been identified in the system BIOS of certain HP PC…
Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege, Arbitrary Code Execution, Unauthorized Code Execution, Denial of Service, and Information Disclosure.
CVE-2022-23958
Medium · 5.5
Mar 2, 2022
Potential vulnerabilities have been identified in the BIOS for some HP PC products which…
Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.
CVE-2022-23957
Medium · 5.5
Mar 2, 2022
Potential vulnerabilities have been identified in the BIOS for some HP PC products which…
Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.
CVE-2022-23955
Medium · 5.5
Mar 2, 2022
Potential vulnerabilities have been identified in the BIOS for some HP PC products which…
Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.
CVE-2022-23954
Medium · 5.5
Mar 2, 2022
Potential vulnerabilities have been identified in the BIOS for some HP PC products which…
Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.
CVE-2022-23956
Medium · 5.5
Mar 2, 2022
Potential vulnerabilities have been identified in the BIOS for some HP PC products which…
Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.
CVE-2022-23953
Medium · 5.5
Mar 2, 2022
Potential vulnerabilities have been identified in the BIOS for some HP PC products which…
Potential vulnerabilities have been identified in the BIOS for some HP PC products which may allow denial of service.
CVE-2021-39301
High · 8.8
CWE-269 Feb 16, 2022
Improper Privilege Management in Hp Z1 Entry Tower G5 Workstation Firmware
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.
CVE-2021-39300
High · 8.8
CWE-269 Feb 16, 2022
Improper Privilege Management in Hp Z1 Entry Tower G5 Workstation Firmware
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.