18015 matches found
CVE-2026-69584
CVE-2026-69584 affects the Windows USB Video Driver , where an integer overflow or wraparound flaw allows an authorized attacker to elevate privileges locally . The Microsoft CNA assigns a CVSS 3.1 score of 7.8 (HIGH) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privilege ...
CVE-2026-69571
CVE-2026-69571 is a heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to elevate privileges. The vulnerability is scored CVSS 3.1: 7.8 (HIGH) with a vector of local attack, low complexity, low privileges required, no user inte...
EUVD-2026-73535
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
EUVD-2026-73528
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network...
CVE-2026-69503
CVE-2026-69503 is a stack-based buffer overflow in the Windows USB Driver that allows an authorized attacker to elevate privileges over a network. The vulnerability carries a CVSS 3.1 base score of 8.0 (HIGH) with a network attack vector, low complexity, low required privileges, and required user...
EUVD-2026-73495
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69422
CVE-2026-69422 is a use-after-free vulnerability in the Windows USB Video Driver that allows a locally authenticated attacker with low privileges to escalate privileges. The attack requires high complexity and no user interaction, with high impact on confidentiality, integrity, and availability, ...
CVE-2026-69319
CVE-2026-69319 is a local privilege elevation vulnerability in the Windows USB Video Driver , caused by a race condition — concurrent execution using a shared resource with improper synchronization. An attacker with low local privileges and no user interaction can exploit this under conditions of...
EUVD-2026-73453
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69295
CVE-2026-69295 is an out-of-bounds read in the Windows USB Driver that allows an authorized local attacker to escalate privileges. The flaw yields high impact across confidentiality, integrity, and availability (CVSS 3.1 score 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), meaning a low-...
EUVD-2026-73435
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69286
CVE-2026-69286 is an out-of-bounds read in the Windows USB Audio Class driver (usbaudio.sys) that allows an authorized local attacker to disclose information . The vulnerability is rated CVSS 3.1: 5.5 (MEDIUM) with a local attack vector, low complexity, and high confidentiality impact but no inte...
EUVD-2026-73431
Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to disclose information locally...
EUVD-2026-73428
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
EUVD-2026-73403
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...
EUVD-2026-73404
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-68840
CVE-2026-68840 is a local privilege escalation vulnerability in the Windows USB Driver , caused by a race condition (concurrent execution using a shared resource with improper synchronization). An authorized attacker (low privileges, no user interaction) can exploit it locally with high complexit...
EUVD-2026-73134
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-69469
CVE-2026-69469 is an elevation of privilege vulnerability in the Windows USB Audio Class driver (usbaudio.sys). The root cause is an integer overflow or wraparound in the driver, which allows an unauthorized attacker with physical access to escalate privileges. The CVSS 3.1 base score is 6.6 (MED...