CVE-2025-10577

High

Description

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. HP is releasing updated audio packages to mitigate the potential vulnerabilities

SeverityHigh
CVSS8.5
Exploit probability—
ProductSound Research
PublishedOct 15, 2025
First seenOct 15, 2025
Weakness typeCWE-266CWE-266

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
HP, Inc. Sound ResearchSee HP security bulletin reference for affected versions—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2025-10577 · Sound Research · Dark Radar