Vulnerability · Published Oct 15, 2025 · Assigned by hp
CVE-2025-10577Sound Research SECOMNService Escalation of Privilege
High 8.5
In plain English
A high-severity security flaw in Sound Research from HP, Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 4.0)8.5High
Exploit odds (30 days)0.1%top 97.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HP, Inc. | Sound Research | See HP security bulletin reference for affected versions |
Weakness: CWE-266 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N