HP Inc. vulnerabilities
205 vulnerabilities
Known vulnerabilities in HP Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 261 products.
Products
50 of 261- HP PC24 vulnerabilities
- Poly Clariti Manager14 vulnerabilities
- HP Linux Imaging And Printing Software (Hplip)10 vulnerabilities
- HP Support Assistant9 vulnerabilities
- HP Laserjet Pro8 vulnerabilities
- HP Device Manager5 vulnerabilities
- HP Security Manager5 vulnerabilities
- Certain HP Laserjet Pro, HP Laserjet Enterprise, HP Laserjet Managed Printers3 vulnerabilities
- Certain HP Laserjet Pro Printers3 vulnerabilities
- HP AC Print & Scan3 vulnerabilities
- HP Easy Start For Macos3 vulnerabilities
- HP Linux Imaging And Printing Software3 vulnerabilities
- HP Output Central3 vulnerabilities
- HP PC Products3 vulnerabilities
- OMEN Gaming Hub3 vulnerabilities
- Certain HP Designjet Products2 vulnerabilities
- Certain HP Desktop PC Products2 vulnerabilities
- Certain HP PC Products2 vulnerabilities
- Edge E2 vulnerabilities
- HP Color Laserjet MFP M478 M479 Series2 vulnerabilities
- HP Color Laserjet Pro M453 M454 Series2 vulnerabilities
- HP Deskjet 3630 All In One Printer Series2 vulnerabilities
- HP Display Control2 vulnerabilities
- HP Inkjet Printers2 vulnerabilities
- HP Jetadvantage Security Manager2 vulnerabilities
- HP Laserjet Pro M304 M305 Printer Series2 vulnerabilities
- HP Laserjet Pro M404 M405 Printer Series2 vulnerabilities
- HP Laserjet Pro MFP M428 M429 F Series2 vulnerabilities
- HP Laserjet Pro MFP M428 M429 Series2 vulnerabilities
- HP Officejet Pro 8710 All In One Printer Series2 vulnerabilities
- HP One Agent Software2 vulnerabilities
- HP PC Hardware Diagnostics Windows2 vulnerabilities
- HP PC Products Using AMI UEFI2 vulnerabilities
- HP System Event Utility2 vulnerabilities
- Poly CCX2 vulnerabilities
- Poly Edge E2 vulnerabilities
- Poly Trio C602 vulnerabilities
- Sound Research2 vulnerabilities
- Thinpro 8.12 vulnerabilities
- Card Readers B Model1 vulnerabilities
- CCX1 vulnerabilities
- Certain HP Enterprise Laserjet, HP Laserjet Managed Printers1 vulnerabilities
- Certain HP Enterprise Laserjet, Laserjet Managed Printers1 vulnerabilities
- Certain HP Enterprise Printers, HP Pagewide Printers, And MFP Products1 vulnerabilities
- Certain HP Envy, Officejet, And Deskjet Printers1 vulnerabilities
- Certain HP Laserjet Printers1 vulnerabilities
- Certain HP Laserjet Pro Devices1 vulnerabilities
- Certain HP Officejet Pro Printers1 vulnerabilities
- Certain HP Pagewide Pro Printers1 vulnerabilities
- Certain HP Workstation Pcs1 vulnerabilities
CVE-2018-5921hp inc.certain hp enterprise printers, hp pagewide printers, and mfp products+194
EPSS score0.74%
A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.CVE-2018-5924hp inc.hp inkjet printers+270EPSS score10.95%
A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a stack buffer overflow, which could allow remote code execution.CVE-2018-5925hp inc.hp inkjet printers+270EPSS score9.74%
A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer overflow, which could allow remote code execution.CVE-2021-3437hp inc.omen gaming hub sdk+2EPSS score15.55%
Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP is releasing software updates to mitigate the potential vulnerabilities.CVE-2021-3942hp inc.hp print products and digital sending products+2700EPSS score1.53%
Certain HP Print products and Digital Sending products may be vulnerable to potential remote code execution and buffer overflow with use of Link-Local Multicast Name Resolution or LLMNR.CVE-2021-3809hp inc.hp pc bios+181EPSS score0.24%
Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities.CVE-2021-3439hp inc.hp pc bios+377EPSS score0.17%
HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities.CVE-2021-3808hp inc.hp pc bios+181EPSS score0.24%
Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities.CVE-2021-3821hp inc.hp futuresmart+1EPSS score0.94%
A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Denial of Service when running HP Workpath solutions on potentially affected products.CVE-2021-3919hp inc.omen gaming hub and hp command center+2EPSS score0.80%
A potential security vulnerability has been identified in OMEN Gaming Hub and in HP Command Center which may allow escalation of privilege and/or denial of service. HP has released software updates to mitigate the potential vulnerability.CVE-2021-3661hp inc.hp workstation bios+20EPSS score0.32%
A potential security vulnerability has been identified in certain HP Workstation BIOS (UEFI firmware) which may allow arbitrary code execution. HP is releasing firmware mitigations for the potential vulnerability.CVE-2025-2268hp inc.hp laserjet mfp m232-m237 printer series+54EPSS score0.46%
The HP LaserJet MFP M232-M237 Printer Series may be vulnerable to a denial of service attack when a specially crafted request message is sent via Internet Printing Protocol (IPP).CVE-2025-13492hp inchp image assistant+1EPSS score0.08%
A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability
could potentially allow a local attacker to escalate privileges via a race condition when installing packages.CVE-2025-1004hp inc.certain hp laserjet pro printers+10EPSS score0.42%
Certain HP LaserJet Pro printers may potentially
experience a denial of service when a user sends a raw JPEG file to the printer
via IPP (Internet Printing Protocol).CVE-2025-1003hp, inc.hp anyware linux agentEPSS score0.24%
A potential vulnerability has been identified in HP Anyware Agent for Linux which might allow for authentication bypass which may result in escalation of privilege. HP is releasing a software update to mitigate this potential vulnerability.CVE-2025-1697hp, inc.hp touchpoint analytics service+1EPSS score0.21%
A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products with versions prior to 4.2.2439. This vulnerability could potentially allow a local attacker to escalate privileges. HP is providing software updates to mitigate this potential vulnerability.CVE-2025-11531hp inchp system event utility+3EPSS score0.40%
HP System Event Utility and Omen Gaming Hub might allow execution of
certain files outside of their restricted paths. This
potential vulnerability was remediated with HP System
Event Utility version 3.2.12 and Omen Gaming Hub version
1101.2511.101.0.CVE-2025-11761hp inchp client management script library+1EPSS score0.21%
A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during the installation process. HP is releasing software updates to mitigate the potential vulnerability.CVE-2025-11998hp inc.card readers b modelEPSS score0.18%
The following HP Card Readers B Models (X3D03B & Y7C05B) are potentially vulnerable to information disclosure, allowing prior user identity to be inherited under certain conditions —e.g., when an NFC device (such as a smartphone/smartwatches) is in proximity during a card swipe event.CVE-2025-26508hp, inc.certain hp laserjet pro, hp laserjet enterprise, hp laserjet managed printers+98EPSS score0.97%
Certain HP LaserJet Pro, HP LaserJet Enterprise, and HP LaserJet Managed Printers may potentially be vulnerable to Remote Code Execution and Elevation of Privilege when processing a PostScript print job.