CVE-2025-10577CWE-266

CVE-2025-10577

published October 15, 2025

CVSS

8.5

EPSS

Percentile

2.4

In the wild

Unconfirmed

What it is

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities

The record

Technical detail

CVSS: 8.5 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00131 · 2.4th percentile
Weakness: CWE-266 · Incorrect Privilege Assignment
Published: 2025-10-15T21:15Z

References (1)

https://support.hp.com/us-en/document/ish_13092608-13092602-16/hpsbhf04051 · [email protected]

EPSS history

Timeline

15 OCT 16:56Z
Sound Research SECOMNService Escalation of Privilege
cvelistv5