CVE-2026-12555: CWE-379 Creation of temporary file in directory with insecure permissions in HP Inc HP Easy Start for macOS
CVE-2026-12555 is a high-severity vulnerability in HP Easy Start for macOS that involves the creation of temporary files in directories with insecure permissions. This flaw may allow an attacker with limited privileges to escalate their privileges on the affected system. The vulnerability affects versions prior to 2.16.7.260722. HP has released updates to address these issues.
AI Analysis
Technical Summary
This vulnerability (CWE-379) in HP Easy Start for macOS arises from the creation of temporary files in directories that have insecure permissions, potentially enabling privilege escalation. The issue affects versions before 2.16.7.260722. The CVSS 4.0 base score is 7.7, indicating high severity, with network attack vector, low attack complexity, and requiring partial privileges but no user interaction. HP has announced updates to mitigate the vulnerability, though no explicit patch link or remediation level is provided in the available data.
Potential Impact
An attacker with some level of privileges on the system could exploit this vulnerability to escalate their privileges, potentially gaining higher-level access than intended. This could lead to unauthorized actions or control over the affected macOS system running HP Easy Start.
Mitigation Recommendations
HP has released updates to mitigate this vulnerability. Users should upgrade HP Easy Start for macOS to version 2.16.7.260722 or later once available. Patch status is not yet confirmed in the provided data; users should consult HP's official advisory for the latest remediation guidance.
CVE-2026-12555: CWE-379 Creation of temporary file in directory with insecure permissions in HP Inc HP Easy Start for macOS
Description
CVE-2026-12555 is a high-severity vulnerability in HP Easy Start for macOS that involves the creation of temporary files in directories with insecure permissions. This flaw may allow an attacker with limited privileges to escalate their privileges on the affected system. The vulnerability affects versions prior to 2.16.7.260722. HP has released updates to address these issues.
CVSS v4.0
Score 7.7high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-379) in HP Easy Start for macOS arises from the creation of temporary files in directories that have insecure permissions, potentially enabling privilege escalation. The issue affects versions before 2.16.7.260722. The CVSS 4.0 base score is 7.7, indicating high severity, with network attack vector, low attack complexity, and requiring partial privileges but no user interaction. HP has announced updates to mitigate the vulnerability, though no explicit patch link or remediation level is provided in the available data.
Potential Impact
An attacker with some level of privileges on the system could exploit this vulnerability to escalate their privileges, potentially gaining higher-level access than intended. This could lead to unauthorized actions or control over the affected macOS system running HP Easy Start.
Mitigation Recommendations
HP has released updates to mitigate this vulnerability. Users should upgrade HP Easy Start for macOS to version 2.16.7.260722 or later once available. Patch status is not yet confirmed in the provided data; users should consult HP's official advisory for the latest remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- hp
- Date Reserved
- 2026-06-17T19:59:49.335Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a8c6c5aacd9273b49cc5460
Added to database: 08/24/2026, 16:07:54 UTC
Last enriched: 08/24/2026, 16:22:10 UTC
Last updated: 08/24/2026, 16:40:58 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.