Privilege escalation in Hp, Inc. Sound Research
CVE-2025-10577
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the pote…
EPSS: 0.001 (2.1th percentile) — read the EPSS interpretation.
Affected products
- Hp, Inc. Sound Research — versions See HP security bulletin reference for affected versions
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-10577?
- CVE-2025-10577 is a vulnerability in Hp, Inc. Sound Research, classified under Incorrect Privilege Assignment. Published 2025-10-15.
- Is CVE-2025-10577 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.