18028 matches found
EUVD-2026-73453
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69295
CVE-2026-69295 is an out-of-bounds read in the Windows USB Driver that allows an authorized local attacker to escalate privileges. The flaw yields high impact across confidentiality, integrity, and availability (CVSS 3.1 score 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), meaning a low-...
EUVD-2026-73435
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69286
CVE-2026-69286 is an out-of-bounds read in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to disclose information . The vulnerability is rated CVSS 3.1: 5.5 (MEDIUM) with a local attack vector, low complexity, and high confidentiality impact but no inte...
EUVD-2026-73431
Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to disclose information locally...
EUVD-2026-73428
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
EUVD-2026-73404
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Driver allows an authorized attacker to elevate privileges locally...
EUVD-2026-73403
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...
CVE-2026-68840
CVE-2026-68840 is a local privilege escalation vulnerability in the Windows USB Driver , caused by a race condition (concurrent execution using a shared resource with improper synchronization). An authorized attacker (low privileges, no user interaction) can exploit it locally with high complexit...
EUVD-2026-73134
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-69469
CVE-2026-69469 is an elevation of privilege vulnerability in the Windows USB Audio Class driver (usbaudio.sys). The root cause is an integer overflow or wraparound in the driver, which allows an unauthorized attacker with physical access to escalate privileges. The CVSS 3.1 base score is 6.6 (MED...
EUVD-2026-73116
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-72962
CVE-2026-72962 is a heap-based buffer overflow in the Windows USB Video Driver that allows an authorized attacker to achieve local privilege escalation . The Microsoft CVSS 3.1 score is 8.2 (HIGH) with vector AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H, indicating a local attack with low complexity, high...
EUVD-2026-73038
Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69527
An out-of-bounds read vulnerability in the Windows USB Mass Storage Class Driver allows an authorized local attacker to disclose information. The CVSS v3.1 score is 5.5 (Medium) with a local attack vector, low privileges required, and high confidentiality impact. CISA's SSVC assessment indicates ...
EUVD-2026-73005
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally...
EUVD-2026-72971
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network...
CVE-2026-69423
A heap-based buffer overflow in the Windows USB Video Driver allows an attacker with low privileges to escalate privileges over a network, requiring user interaction. The vulnerability is rated CVSS 8.0 (HIGH) with high impact to confidentiality, integrity, and availability. No public exploit or ...
CVE-2026-69457
An out-of-bounds read in the Windows USB Driver allows a local, authorized attacker with low privileges and no user interaction to disclose information (high confidentiality impact, no integrity or availability impact). The vulnerability is rated CVSS 3.1 5.5 (MEDIUM) with a vector of AV:L/AC:L/P...