CVE-2026-105006
MediumCVSS 6.4Summary
Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack. The flaw results from using a freed memory resource.
Risk Assessment
An unauthorized attacker with physical access to the device could elevate their privileges in the system, potentially leading to full workstation compromise.
Recommendation
Update the HID class driver to the latest patched version and restrict physical access to devices to trusted personnel only.
Other vulnerabilities in HID class driver
See all- CVE-2026-97804High
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-105003High
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69731High
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS