CVE-2026-93122

A flaw was found in the Linux kernel's USB Audio Class UAC gadget driver. This vulnerability occurs when processing a list of sampling rates, where the driver fails to properly validate the length of the input list. An attacker could provide an overly long list, causing the system to write data...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Use correct version for UAC3 header validation The entry in the validators table for the UAC3 AC header descriptor is defined with the incorrect protocol version UACVERSION2; it should have been UACVERSION3. This...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer dereference in sndusbmixercontrolsbadd In sndusbcreatestreams, for UAC version 3 devices, the Interface Association Descriptor IAD is retrieved via usbifnumtoif. If this call fails, a fallback...

September 14, 2026—KB5129237 (OS Build 20348.5631) Out-of-band

September 14, 2026—KB5129237 OS Build 20348.5631 Out-of-band Applies To Windows Server 2022 Announcements and messages This section provides key notifications related to this release, including announcements, change logs, and end-of-support notices. Windows Secure Boot certificate expiration...

September 14, 2026, 2026—KB5129239 (OS Build 14393.9514) Out-of-band

September 14, 2026, 2026—KB5129239 OS Build 14393.9514 Out-of-band Applies To Windows Server 2016, all editions Win 10 Ent LTSB 2016 Win 10 IoT Ent LTSB 2016 Important Free support for Windows 10 Enterprise 2016 LTSB and Windows Server 2016 will soon end. For information about the availability of...

September 14, 2026—KB5129238 (OS Build 17763.9247) Out-of-band

September 14, 2026—KB5129238 OS Build 17763.9247 Out-of-band Applies To Win 10 Ent LTSC 2019 Windows Server 2019 Summary This article lists the security issues and quality improvements included in this out-of-band update. Windows Server 2019 Windows 10, version 1809 Applies to: Windows Server 201...

September 14, 2026—KB5129235 (OS Build 26100.33451) Out-of-band

September 14, 2026—KB5129235 OS Build 26100.33451 Out-of-band Applies To Windows Server 2025, all editions This out-of-band OOB update for Windows Server 2025 KB5129235 is a non-security cumulative update. Improvements This out-of-band update contains quality improvements from KB5122871 released...

CVE-2026-69687

Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69571

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69469

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-69286

Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to disclose information locally...

CVE-2026-69707

CVE-2026-69707 is an integer overflow or wraparound vulnerability in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized, locally-privileged attacker to escalate privileges. The flaw is rated CVSS 3.1: 7.8 (HIGH) with a local attack vector, low complexity, low privileges r...

EUVD-2026-73535

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69571

CVE-2026-69571 is a heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to elevate privileges. The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user inte...

EUVD-2026-73428

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-73215

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

Use after free in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-69307: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...