AI description
CVE-2026-12556 is a privilege escalation vulnerability identified in HP Easy Start for macOS, affecting versions prior to 2.16.7.260722. The flaw stems from the cleartext transmission of sensitive information (CWE-319), meaning data is exchanged over the network without adequate encryption. This vulnerability allows an attacker who can intercept or manipulate network traffic to leverage this weakness and escalate privileges on affected macOS systems. The issue is also associated with relaxed macOS App Transport Security settings in the vulnerable builds, which permitted insecure HTTP connections that would typically be restricted. HP has released updates to mitigate these potential vulnerabilities.
- Description
- Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.
- Source
- hp-security-alert@hp.com
- NVD status
- Deferred
CVSS 4.0
- Type
- Secondary
- Base score
- 7.7
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- HIGH
- hp-security-alert@hp.com
- CWE-319
Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.
- Hype score
10
Rooted in Trust: Three privilege-escalation vulnerabilities in HP Easy Start for macOS (CVE-2026-12554, CVE-2026-12555, CVE-2026-12556) https://t.co/LcYlOVgrv5
@Dinosn
3 Sept 2026
4900 Impressions
3 Retweets
8 Likes
5 Bookmarks
0 Replies
0 Quotes
Rooted in Trust: Three privilege-escalation vulnerabilities in HP Easy Start for macOS (CVE-2026-12554, CVE-2026-12555, CVE-2026-12556) https://t.co/YIBPkl86LR
@_r_netsec
2 Sept 2026
1056 Impressions
1 Retweet
3 Likes
2 Bookmarks
0 Replies
0 Quotes