Sound Research SECOMN64 Escalation of Privilege

published 2024-11-12 23 mo ago modified 2026-06-17 4 mo ago also EUVD-2024-27166

cvss: 6.0; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.1%; EPSS 0.1% chance of exploitation in 30 days, percentile 3%
public exploits: 0; none known

Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities.

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 23 mo ago (2024-11-13)

Exploit prediction

0.14% chance of exploitation in the next 30 days, higher than 3% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	6.0	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H

Affected products

Sound Research SECOMN64 Driver
hewlett_packard_enterprise sound_research_secomn64_driver

Classification

Weakness

CWE-427 Uncontrolled Search Path Element

References

support.hp.com /us-en/document/ish_11567250-11567490-16/hpsbhf03987

Sources

CVE List CVE-2024-2207
NVD CVE-2024-2207

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary