CVE-2026-58528

CVE-2026-58528 describes an out-of-bounds read in the Windows USB Audio Class driver (usbaudio.sys) that could lead to an information disclosure under a physical-access scenario. The vulnerability affects the Windows USB Audio subsystem and is rated with CVSSv3.1: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/...

CVE-2026-50453 Windows USB Audio Class Driver Information Disclosure Vulnerability

...

CVE-2026-50453 Windows USB Audio Class Driver Information Disclosure Vulnerability

...

CVE-2026-50453

CVE-2026-50453 affects the Windows USB Audio Class driver (usbaudio.sys). It is an out-of-bounds read vulnerability that may disclose information and requires physical access (attack vector: physical, base CVSS 6.1). Root cause: memory read past bounds. Impact: information disclosure with a physi...

CVE-2026-50440 Windows Audio Service Elevation of Privilege Vulnerability

...

CVE-2026-50440

CVE-2026-50440 overview (Windows Audio Service): A race condition caused by concurrent execution on a shared resource with improper synchronization in the Windows Audio Service can allow an authorized local attacker to elevate privileges. The vulnerability is described as a local privilege-escala...

CVE-2026-50440 Windows Audio Service Elevation of Privilege Vulnerability

...

CVE-2026-50351 Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability

...

CVE-2026-50351 Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability

...

CVE-2026-50351

Improper access control in Windows Audio Compression Manager ACM allows an authorized attacker to elevate privileges locally...

CVE-2026-50351

The CVE-2026-50351 issue concerns Windows Audio Compression Manager (ACM). It describes improper access control that could let an authenticated, local attacker elevate privileges on affected Windows systems. Documented impact is local privilege escalation with high severity (CVSS v3.1 base score ...

CVE-2026-49794

CVE-2026-49794 concerns the Windows USB Audio Class driver (usbaudio.sys). The vulnerability is an out-of-bounds read in the driver that enables an unauthorized attacker to disclose information when a physical access scenario is present. Attacker class: physical access with low attack complexity ...

CVE-2026-49794 Windows USB Audio Class Driver Information Disclosure Vulnerability

...

CVE-2026-49794 Windows USB Audio Class Driver Information Disclosure Vulnerability

...

CVE-2026-34328 Windows Audio Service Information Disclosure Vulnerability

...

CVE-2026-34328

CVE-2026-34328 describes an information-disclosure issue in Windows Audio Service, allowing a local attacker with low privileges to disclose sensitive information. Affected: Windows Audio Service (Windows). Root cause details are not provided beyond the high-level description. CVSS v3.1 base scor...

CVE-2026-34328 Windows Audio Service Information Disclosure Vulnerability

...

CVE-2026-54989

Use after free in Quality Windows Audio/Video Experience QWAVE service allows an authorized attacker to elevate privileges locally...

CVE-2026-54989 Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability

...

CVE-2026-54989

CVE-2026-54989 is a use-after-free in the Quality Windows Audio/Video Experience (QWAVE) service that enables a locally authenticated attacker to elevate privileges. The CVSS 3.1 metrics describe a Local attack with High impact on confidentiality, integrity, and availability, requiring LOW privil...