VulnerabilityDeferred

CVE-2025-10576

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege.

HIGH 8.5EPSS 0.12%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.12%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities.

CVSS 4.0: 8.5 HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.12% probability · 2th percentile
CISA KEV: Not listed
Weakness: CWE-266
Source: hp-security-alert@hp.com

References

https://support.hp.com/us-en/document/ish_13092608-13092602-16/hpsbhf04051

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.