CVE-2025-10577
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities.
Risk Assessment
The vulnerability could allow a local attacker to escalate privileges, potentially leading to unauthorized access to the system and data.
Recommendation
Install the updated audio packages provided by HP for affected products.
Other vulnerabilities in HP PC audio package
Original NVD description (English source)
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities
Vulnerability data from NVD (NIST) · CISA KEV · EPSS