Vulnerability · Published Nov 12, 2024 · Assigned by hp
CVE-2024-2208Sound Research SECOMN64 Escalation of Privilege
High 8.8
In plain English
A high-severity uncontrolled search path in SECOMN64 Driver from Sound Research. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.2%top 94.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Sound Research | SECOMN64 Driver | See HP Security Bulletin reference for affected versions. |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H