CVE-2024-2208CWE-427

Sound Research SECOMN64 Escalation of Privilege

High · published November 12, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00166 · 5.5th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2024-11-12T19:40Z
EPSS history
Timeline
  • 12 NOV 19:40Z
    Sound Research SECOMN64 Escalation of Privilege
    cvelistv5