Vulnerability · Published Oct 15, 2025 · Assigned by hp
CVE-2025-10576Sound Research SECOMNService Escalation of Privilege
High 8.5
In plain English
A high-severity security flaw in Sound Research from HP, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 4.0)8.5High
Exploit odds (30 days)0.1%top 97.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HP, Inc. | Sound Research | See HP security bulletin reference for affected versions |
Weakness: CWE-266 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N