Escalation of Privilege Vulnerabilities in HP Audio Package for PC Products
CVE-2025-10576

8.5HIGH

Key Information:

Vendor

HP, Inc.

Status
Sound Research
Vendor
CVE Published:
15 October 2025

What is CVE-2025-10576?

Potential vulnerabilities have been found in the audio package associated with certain HP PC products utilizing the Sound Research SECOMN64 driver. These flaws may facilitate unauthorized privilege escalation, creating the potential for malicious actors to gain elevated access to system resources. HP is proactively addressing this issue by releasing updated audio packages to enhance security and mitigate any associated risks.

Affected Version(s)

Sound Research See HP security bulletin reference for affected versions

References

https://support.hp.com/us-en/document/ish_13092608-130926...

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-10576 : Escalation of Privilege Vulnerabilities in HP Audio Package for PC Products