A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might allow for escalation
of privilege and/or arbitrary code execution. HP is releasing software updates to mitigate the potential vulnerability.
CVE-2026-106177 is a heap-based buffer overflow vulnerability in HP Sure Click Enterprise versions prior to 4.4.33. This flaw exists in the kernel component and may allow a local attacker with high privileges to escalate privileges further or execute arbitrary code. HP has released version 4.4.33 to address this issue. The vulnerability has a CVSS 3.1 score of 6.4, indicating medium severity.
Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities.
Previous versions of HP ThinPro (prior to HP ThinPro 9 SP3) could potentially contain security vulnerabilities. HP has released HP ThinPro 9 SP3, which includes updates to mitigate potential vulnerabilities.
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls.
CVE-2026-89084 is a high-severity vulnerability in HP Inc's HP AC Print & Scan software, specifically in the HP Advance software component. It involves a CWE-22 (Path Traversal) flaw that could allow an attacker to elevate privileges, execute remote code, or write arbitrary files on the HP Advance server under certain conditions. The vulnerability has a CVSS 4.0 base score of 8.8, indicating a significant risk if exploited. No affected versions or patch information are provided, and there are no known exploits in the wild at this time.
CVE-2026-89083 is a critical vulnerability in HP Inc's HP AC Print & Scan software, specifically in the HP Advance component. It involves a CWE-94 issue that may allow elevation of privilege, remote code execution, or arbitrary file write on the HP Advance server under certain conditions. The vulnerability has a high CVSS 4.0 score of 9.3, indicating severe impact if exploited. No affected versions or patch information are provided.
CVE-2026-89082 is a critical vulnerability in HP Inc's HP AC Print & Scan software, specifically in the HP Advance software component. The flaw is categorized as CWE-94, indicating improper control of code generation, which can lead to elevation of privilege, remote code execution, or arbitrary file write on the HP Advance server. This vulnerability allows an unauthenticated attacker to execute code remotely with high impact on confidentiality, integrity, and availability. No specific affected versions or patches are provided in the available data.
CVE-2026-91106 is a critical heap-based buffer overflow vulnerability in HP Linux Imaging and Printing Software (HPLIP). It affects versions from 0 up to but not including 3.26.6. The vulnerability could allow remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. HP has identified and remediated multiple vulnerabilities in HPLIP, including this one.
CVE-2026-91105 is a heap-based buffer overflow vulnerability in HP Linux Imaging and Printing Software (HPLIP) versions prior to 3.26.6. This flaw could allow remote attackers to cause remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification. HP has identified and remediated this and other related vulnerabilities in HPLIP.
CVE-2026-91104 is a critical heap-based buffer overflow vulnerability in HP Linux Imaging and Printing Software (HPLIP). It affects versions from 0 up to but not including 3.26.6. The flaw could allow remote attackers to execute code, escalate privileges, cause denial of service, disclose information, or modify files without authorization under certain conditions. HP has identified and remediated this vulnerability.
CVE-2026-91103 is an integer underflow vulnerability (CWE-191) in HP Linux Imaging and Printing Software (HPLIP) versions before 3.26.6. HP has identified and fixed multiple vulnerabilities in HPLIP that could allow remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. The CVSS 4.0 base score is 5.1, indicating a medium severity level.
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.
CVE-2026-91101 is a medium severity vulnerability in HP Linux Imaging and Printing Software (HPLIP) caused by improper validation of array indexes (CWE-129). It affects versions prior to 3.26.6. The flaw could allow remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. HP has identified and remediated multiple vulnerabilities in HPLIP, including this one.
CVE-2026-91100 is a medium-severity vulnerability in HP Linux Imaging and Printing Software (HPLIP) caused by improper neutralization of special elements in OS commands, leading to OS command injection. This vulnerability affects versions prior to 3.26.6. It could allow remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. HP has identified and remediated multiple vulnerabilities in HPLIP, including this one.
CVE-2026-91099 is a medium severity vulnerability in HP Linux Imaging and Printing Software (HPLIP) involving symbolic link (symlink) following (CWE-61). Multiple vulnerabilities were identified and remediated by HP affecting several components that could allow remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. The affected versions are those prior to 3.26.6. The CVSS 4.0 base score is 5.1, indicating a medium impact. No known exploits are reported in the wild. HP has remediated these issues, but no direct patch link is provided in the data.
A heap-based buffer overflow vulnerability (CWE-122) exists in HP Linux Imaging and Printing Software (HPLIP) versions prior to 3.26.6. This vulnerability could allow remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions. The vulnerability has been identified and remediated by HP.
CVE-2026-91097 is a high-severity vulnerability in HP Linux Imaging and Printing Software (HPLIP) involving an out-of-bounds write (CWE-787). This flaw affects versions prior to 3.26.6 and could allow remote attackers to cause denial of service, escalate privileges, execute code remotely, disclose information, or modify files without authorization under certain conditions. HP has identified and remediated this and other vulnerabilities in HPLIP. No known exploits are reported in the wild at this time.
A potential security vulnerability has been identified in the HP Support
Assistant for versions prior to 9.53.2.0. The vulnerability
could potentially allow a local attacker to escalate
privileges due to insufficient access controls.
CVE-2026-82346 is a high-severity vulnerability in HP ImageDiags prior to version 5.0.0.36. It involves the creation of temporary files in directories with insecure permissions, potentially allowing a local attacker to escalate privileges due to insufficient access controls. The vulnerability requires local access and user interaction to exploit. No official patch or remediation guidance has been provided yet.
Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of privilege. HP is releasing updates to mitigate these potential vulnerabilities.