EUVD-2026-80641

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in sndusbmidius122loutput The sndusbmidius122loutput picks a count of 2 on anything slower than high speed and never relates it to ep-maxtransfer. The URB buffer holds exactly maxtransfer bytes, so ...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Remove sndBUGON from sndusbmidioutputopen The function sndusbmidioutputopen includes a check for the NULL port, which involves calling sndBUGON. The use of sndBUGON was intended to prevent such issues from...

CVE-2026-89736

A flaw was found in the Linux kernel's USB audio gadget driver uaudio. This vulnerability occurs during sound card disconnection when Asynchronous Linux Sound Architecture ALSA control elements kctls remain open in userspace. A local attacker can exploit this timing issue by interacting with thes...

CVE-2026-69859

Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69707

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69687

Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69571

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69469

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-69413

Use after free in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69286

Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to disclose information locally...

CVE-2026-69270

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69707

CVE-2026-69707 is an integer overflow or wraparound vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized, locally-privileged attacker to escalate privileges. The flaw is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, low privileges r...

EUVD-2026-73578

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-73576

Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-73535

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69571

CVE-2026-69571 is a heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to elevate privileges. The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user inte...

CVE-2026-69286

CVE-2026-69286 is an out-of-bounds read in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to disclose information . The vulnerability is rated CVSS 3.1: 5.5 (MEDIUM) with a local attack vector, low complexity, and high confidentiality impact but no inte...

EUVD-2026-73428

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-73134

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-69469

CVE-2026-69469 is an elevation of privilege vulnerability in the Windows USB Audio Class driver (usbaudio.sys). The root cause is an integer overflow or wraparound in the driver, which allows an unauthorized attacker with physical access to escalate privileges. The CVSS 3.1 base score is 6.6 (MED...