CVE-2026-49804
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
A heap-based buffer overflow in the Windows USB Video Driver allows an unauthorized attacker to elevate privileges through a physical attack.
Risk Assessment
A physical attack could allow a local attacker to gain elevated privileges, potentially leading to full system compromise.
Recommendation
Apply the security update provided by the Windows vendor immediately and restrict physical access to the devices.
Other vulnerabilities in Windows USB Video Driver
See all- CVE-2026-72962High
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69584High
Integer overflow or wraparound in the Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69423High
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69422High
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69319High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack.