CVE-2025-10577

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities

CVSS 4.0

8.5CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS

0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-25)

CWE

CWE-266

Published

2025-10-15

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

References

• https://support.hp.com/us-en/document/ish_13092608-13092602-16/hpsbhf04051

Check your stackJSON