CVE-2025-10576CWE-266

CVE-2025-10576

published October 15, 2025

CVSS
8.5
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities.

The record
Technical detail
CVSS
8.5 · NONE
CVSS v4.0
Not supplied
EPSS
0.00131 · 2.5th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2025-10-15T21:15Z
References (1)
https://support.hp.com/us-en/document/ish_13092608-13092602-16/hpsbhf04051 · [email protected]
EPSS history
Timeline
  • 15 OCT 16:53Z
    Sound Research SECOMNService Escalation of Privilege
    cvelistv5