By year
99
00
01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2026-91093 A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might allow for escalation of privilege High 8.5 · Oct 23, 2026
- CVE-2026-19915 A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.55.10.0.High 7.3 · Sep 22, 2026
- CVE-2026-89084 HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary fileHigh 8.8 · Sep 16, 2026
- CVE-2026-89083 HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary fileCritical 9.3 · Sep 16, 2026
- CVE-2026-89082 HP has identified potential security vulnerabilities in the HP Advance software that may enable elevation of privilege, remote code execution, or arbitrary fileCritical 9.3 · Sep 16, 2026
- CVE-2026-91106 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP.Critical 9.3 · Sep 16, 2026
- CVE-2026-91105 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP.High 8.6 · Sep 16, 2026
- CVE-2026-91104 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP.Critical 9.3 · Sep 16, 2026
- CVE-2026-91102 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP.High 8.4 · Sep 16, 2026
- CVE-2026-91098 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP.High 8.6 · Sep 16, 2026
- CVE-2026-91097 HP has identified and remediated multiple externally reported vulnerabilities within HPLIP.High 7 · Sep 16, 2026
- CVE-2026-15431 A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.53.2.0.High 7.3 · Sep 3, 2026
- CVE-2026-82346 A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36.High 7 · Aug 31, 2026
- CVE-2026-12556 Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722.High 7.7 · Aug 24, 2026
- CVE-2026-12555 Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722.High 7.7 · Aug 24, 2026
- CVE-2026-12554 Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722.High 8.5 · Aug 24, 2026
- CVE-2026-75946 A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0.High 8.2 · Aug 21, 2026
- CVE-2026-12553 HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files through a High 8.9 · Aug 17, 2026
- CVE-2026-13753 Certain HP DeskJet All-in-One printers may be potentially vulnerable to information disclosure that allows an unauthenticated attacker to access sensitive inforHigh 7.5 · Jul 6, 2026
- CVE-2026-14544 A flaw was found in HPLIP (HP Linux Imaging and Printing Software).Critical 9.8 · Jul 3, 2026
- CVE-2026-2891 The following Poly Voice IP devices, CCX, Trio, and Edge E, might be inoperable if they connect to a malicious SIP server and receive malformed data.High 8.2 · Jul 1, 2026
- CVE-2026-8864 The HP Fan Control App might allow local escalation of privileges.High 7.3 · Jun 30, 2026
- CVE-2026-7539 A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking Stations, which might allow escalation of High 7.3 · Jun 24, 2026
- CVE-2026-5064 Potential security vulnerabilities have been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privHigh 8.5 · Jun 15, 2026
- CVE-2026-0826 In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code executioCritical 9.2 · Jun 1, 2026
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.