CVE-2025-24988 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

CVE-2025-24987

CVE-2025-24987 is a Windows USB Video Driver vulnerability described as an out-of-bounds read that can allow an authorized attacker to elevate privileges with physical access. The issue affects the Windows USB Video Driver component and is associated with high impact on confidentiality, integrity...

CVE-2025-24987 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

CVE-2025-24987 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

CVE-2025-24988 Windows USB Video Class System Driver Elevation of Privilege Vulnerability

...

CVE-2025-24988

The CVE-2025-24988 entry affects the Windows USB Video Driver, with an out-of-bounds read vulnerability that enables an authorized attacker with physical access to elevate privileges. Connected sources confirm this CVE name and context and indicate Microsoft has released updates to fix Windows US...

February 11, 2025—KB5051980 (OS Build 25398.1425)

None None...

February 11, 2025—KB5051979 (OS Build 20348.3207)

None None...

February 11, 2025—KB5052040 (OS Build 10240.20915) - EXPIRED

None None...

February 11, 2025—KB5052000 (OS Build 17763.6893) - EXPIRED

None None...

February 11, 2025—KB5052006 (OS Build 14393.7785)

None None...

Windows USB Video Class System Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical attack...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...

Windows USB Video Class System Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...

kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices

A vulnerability was found in the Linux kernel's USB Audio driver. This flaw allows an attacker with physical access to the system to use a malicious USB device to gain additional access. This is possible by manipulating system memory, potentially escalating privileges, or executing arbitrary code...

Microsoft Windows USB Video Class driver 缓冲区错误漏洞

Microsoft Windows USB Video Class driver is a driver for webcams or digital camcorders from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows USB Video Class driver. An attacker could exploit the vulnerability to elevate privileges. The following products and...

Microsoft Windows USB Video Class driver 缓冲区错误漏洞

Microsoft Windows USB Video Class driver is a driver for webcams or digital camcorders from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows USB Video Class driver. An attacker could exploit the vulnerability to elevate privileges. The following products and...

PT-2025-10832

Name of the Vulnerable Software and Affected Versions Windows USB Video Class System Driver affected versions not specified Description The issue is an out-of-bounds read in the Windows USB Video Driver, allowing an authorized attacker to elevate privileges with a physical attack. Recommendations...

PT-2025-10833

Name of the Vulnerable Software and Affected Versions Windows USB Video Class System Driver affected versions not specified Description The issue is an out-of-bounds read in the Windows USB Video Driver, allowing an authorized attacker to elevate privileges with a physical attack. Recommendations...

kernel security update

5.14.0-503.31.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...