Privilege escalation in HP, Inc. Sound Research
CVE-2025-10576
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities.
Published · last modified .
EPSS exploit prediction
EPSS: 0.001 (2.2th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 2nd percentile — 2.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: +0.000
Affected products
- HP, Inc. Sound Research — versions See HP security bulletin reference for affected versions
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-10576?
- CVE-2025-10576 is a vulnerability in HP, Inc. Sound Research, classified under Incorrect Privilege Assignment. Published 2025-10-15.
- Is CVE-2025-10576 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.