CVE-2026-50453

Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-58528

CVE-2026-58528 describes an out-of-bounds read in the Windows USB Audio Class driver (usbaudio.sys) that could lead to an information disclosure under a physical-access scenario. The vulnerability affects the Windows USB Audio subsystem and is rated with CVSSv3.1: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/...

CVE-2026-58528 Windows USB Audio Class Driver Information Disclosure Vulnerability

...

CVE-2026-58528 Windows USB Audio Class Driver Information Disclosure Vulnerability

...

CVE-2026-50453 Windows USB Audio Class Driver Information Disclosure Vulnerability

...

CVE-2026-49794 Windows USB Audio Class Driver Information Disclosure Vulnerability

...

CVE-2026-49794 Windows USB Audio Class Driver Information Disclosure Vulnerability

...

CVE-2026-49794

CVE-2026-49794 concerns the Windows USB Audio Class driver (usbaudio.sys). The vulnerability is an out-of-bounds read in the driver that enables an unauthorized attacker to disclose information when a physical access scenario is present. Attacker class: physical access with low attack complexity ...

Windows USB Audio Class Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-58528: Out-of-bounds Read

Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-50453: Out-of-bounds Read

Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-49794: Out-of-bounds Read

Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to disclose information with a physical attack...

PT-2026-58166

Name of the Vulnerable Software and Affected Versions Windows USB Audio Class driver usbaudio.sys affected versions not specified Description An out-of-bounds read in the usbaudio.sys driver allows an unauthorized attacker to disclose sensitive information through a physical attack. An...

The vulnerability of the usbtmc_ioctl_request() function in the drivers/usb/class/usbtmc.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbtmcioctlrequest function in the drivers/usb/class/usbtmc.c module of the Linux USB device driver framework is related to operations involving resources after their expiration. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-23009

In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: don't dereference freed ring when removing sideband endpoint xhcisidebandremoveendpoint incorrecly assumes that the endpoint is running and has a valid transfer ring. Lianqin reported a crash during suspend/wake-u...

ROS-20260114-7324

A vulnerability in the drivers/usb/class/cdc-acm.c component of the Linux kernel is related to errors in processing length parameters. Exploitation of the vulnerability could allow an attacker to affect data integrity...

CVE-2025-68622

Espressif ESP-IDF USB Host UVC Class Driver allows video streaming from USB cameras. Prior to 2.4.0, a vulnerability in the esp-usb UVC host implementation allows a malicious USB Video Class UVC device to trigger a stack buffer overflow during configuration-descriptor parsing. When UVC...

CVE-2025-68622: Stack-based Buffer Overflow

Espressif ESP-IDF USB Host UVC Class Driver allows video streaming from USB cameras. Prior to 2.4.0, a vulnerability in the esp-usb UVC host implementation allows a malicious USB Video Class UVC device to trigger a stack buffer overflow during configuration-descriptor parsing. When UVC...

CVE-2025-40016

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Mark invalid entities with id UVCINVALIDENTITYID Per UVC 1.1+ specification 3.7.2, units and terminals must have a non-zero unique ID. Each Unit and Terminal within the video function is assigned a unique...

Windows USB Video Class System Driver Information Disclosure Vulnerability

Generation of error message containing sensitive information in Windows USB Video Driver allows an authorized attacker to disclose information locally...