CVE-2016-2246
HighSummary
HP ThinPro versions 4.4 through 6.1 mishandle the keyboard layout control panel and virtual keyboard application, allowing local users to bypass intended access restrictions and gain privileges.
Risk Assessment
The organization may be exposed to unauthorized access by local users, potentially leading to privilege escalation and security breaches.
Recommendation
It is recommended to update HP ThinPro to the latest version to mitigate this vulnerability and implement additional access control measures.
Other vulnerabilities in HP ThinPro
See all- CVE-2025-43017Critical
HP ThinPro 8.1 System management application failed to verify user's true identity. HP has released HP ThinPro 8.1 SP8, which includes updates to mitigate potential vulnerabilities.
- CVE-2026-84900Medium
Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mitigate potential vulnerabilities. Previous versions of HP ThinPro (prior to HP ThinPro 9 SP3) could potentially contain security vulnerabilities. HP has released HP ThinPro 9 SP3, which includes updates to mitigate potential vulnerabilities.
Original NVD description (English source)
HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended access restrictions and gain privileges via unspecified vectors.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS