CVE-2026-12554: HP Easy Start for macOS - Security Update

Severity: high (CVSS 8.5 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-24 · updated 2026-10-12
Weakness: CWE-1104

Description

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.

Affected products

HP Inc HP Easy Start for macOS: before 2.16.7.260722 — fixed in 2.16.7.260722

How to fix

Upgrade to a fixed version: HP Inc HP Easy Start for macOS 2.16.7.260722. Check the vendor advisory for mitigations.

References

https://ciphersecuritylabs.com/papers/rooted-in-trust-breaking-hp-easy-starts-macos-privilege-boundaries/
https://support.hp.com/us-en/document/ish_15512340-15512362-16/hpsbpi04124

Get alerted when CVE-2026-12554 or the next vulnerability affects your stack