Sound Research SECOMN64 CVE-2025-10576

Exploitation requires the vulnerable Sound Research SECOMN64 audio driver/package to be installed, which is present on certain HP PC products shipping with Sound Research/Conexant audio - not all HP machines. The attacker must already have local access with at least a low-privileged authenticated account (PR:L) on the machine; this is not remotely reachable (AV:L) and cannot be triggered over a network or by luring a user (UI:N but local-only). The principal limiting factors are therefore the local-access prerequisite, the requirement for an existing low-privilege foothold, and the presence of the specific affected HP audio package rather than any default remote exposure.

Signals are consistent and point to a moderate, non-urgent priority. The CVSS 4.0 vector (AV:L/AC:L/PR:L/UI:N) describes a locally-exploitable privilege-escalation flaw requiring an already-authenticated low-privileged user, with high confidentiality, integrity, and availability impact once triggered (VC:H/VI:H/VA:H) - aligning with CWE-266 (Incorrect Privilege Assignment). The local-only attack vector is the dominant risk-limiting factor: an attacker must already have code execution or a foothold on the HP endpoint before this becomes useful, so it is a post-compromise escalation primitive rather than an initial-access vector. The EPSS score of 0.13% (2nd percentile) reinforces low real-world exploitation likelihood, and there is no CISA KEV listing and no public proof-of-concept, so this is not evidence of active exploitation. There is no SSVC decision data in the input. No signals conflict: a genuinely high local impact (CVSS 8.5) paired with low exploitation probability and local-only access means this is a 'patch in normal cycle' issue for most environments, elevated only for high-value or shared HP endpoints where local footholds are plausible. Note: the exact affected audio-package versions and remediated versions are not enumerated in the provided data - verify against HP advisory hpsbhf04051.

An attacker who already has a standard low-privileged account or foothold on an affected HP PC abuses the Sound Research SECOMN64 audio driver's incorrect privilege handling to execute code or operations at a higher privilege level (e.g., SYSTEM). No user interaction is required, but local access and low-level authentication are prerequisites. No public exploit code has been identified at time of analysis.