CVE-2026-69859: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69490: Out-of-bounds Read

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...

PT-2026-87364

Name of the Vulnerable Software and Affected Versions Windows USB Video Driver affected versions not specified Description A race condition occurs in the Windows USB Video Driver due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...

PT-2026-87877

Name of the Vulnerable Software and Affected Versions Windows USB Video Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows USB Video Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer...

CVE-2026-69457: Out-of-bounds Read

Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally...

CVE-2026-69571: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

PT-2026-87495

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...

PT-2026-87575

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

KB5122878: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (September 2026)

The remote Windows host is missing security update 5122878. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5123066: Windows Server 2012 R2 Security Update (September 2026)

The remote Windows host is missing security update 5123066. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5124012: Windows 11 Version 26H1 Security Update (September 2026)

The remote Windows host is missing security update 5124012. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5122876: Windows 10 version 1809 / Windows Server 2019 Security Update (September 2026)

The remote Windows host is missing security update 5122876. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

PT-2026-87342

Name of the Vulnerable Software and Affected Versions Windows USB Driver affected versions not specified Description An out-of-bounds read in the Windows USB Driver allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment...

KB5123099: Windows 10 Version 1607 / Windows Server 2016 Security Update (September 2026)

The remote Windows host is missing security update 5123099. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5124008: Windows 11 Version 24H2 / 25H2 / 26H2 Security Update (September 2026)

The remote Windows host is missing security update 5124008. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

CVE-2026-68840: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Driver allows an authorized attacker to elevate privileges locally...

KB5122871: Windows Server 2025 Security Update (September 2026)

The remote Windows host is missing security update 5122871. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5122882: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2026)

The remote Windows host is missing security update 5122882. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

Security update for libusb-1_0

This update for libusb-10 fixes the following issue: CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration descriptor bsc1266664. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4050-1 Security update for libusb-1_0

This update for libusb-10 fixes the following issue: - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration descriptor bsc1266664...