CVE-2026-12554

Published Aug 24, 2026

Last updated 13 hours ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-12554 is a local privilege escalation vulnerability identified in HP Easy Start for macOS, affecting versions prior to 2.16.7.260722. This flaw allows a local attacker with low privileges to elevate their system privileges on the compromised macOS host. The vulnerability stems from the application's use of an outdated or risky component, categorized under CWE-1104. HP has released updated software to address and mitigate these potential security vulnerabilities.

Description: Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.
Source: hp-security-alert@hp.com
NVD status: Deferred

Risk scores

CVSS 4.0

Type: Secondary
Base score: 8.5
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: HIGH

Weaknesses

hp-security-alert@hp.com: CWE-1104

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 10

References