CVE-2024-2207CWE-427

Sound Research SECOMN64 Escalation of Privilege

Medium · published November 12, 2024

CVSS v3.1
6.0
EPSS
0%
Percentile
2.8
In the wild
Unconfirmed
What it is

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00137 · 2.8th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2024-11-12T19:24Z
EPSS history
Timeline
  • 12 NOV 19:24Z
    Sound Research SECOMN64 Escalation of Privilege
    cvelistv5