HP Inc. vulnerabilities
229 CVEs and advisories name HP Inc. as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-5749Certain HP DesignJet products – Credential reflection
- CVE-2024-27458HP Hotkey Support – Escalation of Privilege
- CVE-2024-8733HP One Agent Software – Potential Privilege Escalation
- CVE-2024-9423Certain HP LaserJet Printers – Potential Denial of Service
- CVE-2024-5760The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shell
- CVE-2024-7720HP Security Manager - Potential Remote Code Execution
- CVE-2024-8105Insecure Platform Key (PK) used in UEFI system firmware signature
- CVE-2024-41912A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices.
- CVE-2024-41911A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices.
- CVE-2024-41910A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices.
- CVE-2024-41913Clariti Manager – Arbitrary File Upload
- CVE-2024-29080Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software Driv
- CVE-2024-24970Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application Enabling Software Driv
- CVE-2024-4143Certain HP PC products using AMI BIOS – Buffer Overflow
- CVE-2022-27540A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might a
- CVE-2024-2300HP Advance Mobile Application – Potential Information Disclosure
- CVE-2022-37020HP PC BIOS May 2024 Security Updates for Potential Stack Buffer Overflows
- CVE-2022-37019HP PC BIOS May 2024 Security Updates for Potential Stack Buffer Overflows
- CVE-2024-5143A user with device administrative privileges can change existing SMTP server settings on the device, without having to re-enter SMTP server
- CVE-2024-2301Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting (XSS) attack via the web management interface of the de
- CVE-2024-27460A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below.
- CVE-2024-1695A potential security vulnerability has been identified in the HP Application Enabling Software Driver for certain HP PC products, which migh
- CVE-2024-28893Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been
- CVE-2024-3281A vulnerability was discovered in the firmware builds after 8.0.2.3267 and prior to 8.1.3.1301 in CCX devices.
- CVE-2024-2209HP Printer Firmware Update Utility for Certain HP DeskJet Printers - Potential Execution of Arbitrary Code
- CVE-2023-4063Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request.
- CVE-2023-5410A potential security vulnerability has been reported in the system BIOS of certain HP PC products, which might allow memory tampering.
- CVE-2024-1869Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out-of-bounds when usin
- CVE-2024-1174Previous versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8) could potentially contain security vulnerabilities.
- CVE-2024-0407Certain HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Information Disclosure