High severity · published Oct 15, 2025
CVE-2025-10576
Sound Research SECOMNService Escalation of Privilege
8.5
CVSS
0.1%
EPSS
No
On KEV
Description
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SR
Sound Research · HP, Inc.
See HP security bulletin reference for affected versions · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-10576
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-10576
support.hp.com
https://support.hp.com/us-en/document/ish_13092608-13092602-16/hpsbhf04051
More from Sound Research
8.5
CVE-2025-10577
Sound Research SECOMNService Escalation of Privilege