Escalation of Privilege Vulnerabilities in HP Audio Package for PC Products
CVE-2025-10576

8.5HIGH

Key Information:

Vendor

HP, Inc.

Status
Sound Research
Vendor
CVE Published:
15 October 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-10576?

Potential vulnerabilities have been found in the audio package associated with certain HP PC products utilizing the Sound Research SECOMN64 driver. These flaws may facilitate unauthorized privilege escalation, creating the potential for malicious actors to gain elevated access to system resources. HP is proactively addressing this issue by releasing updated audio packages to enhance security and mitigate any associated risks.

Affected Version(s)

Sound Research See HP security bulletin reference for affected versions

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-10576
Created by R41N3RZUF477

References

https://support.hp.com/us-en/document/ish_13092608-130926...

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-10576 : Escalation of Privilege Vulnerabilities in HP Audio Package for PC Products