CVE-2026-49806
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A race condition in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could gain higher privileges, potentially leading to full system compromise.
Recommendation
Install the latest Windows security updates from Microsoft.
Other vulnerabilities in Windows USB Print Driver
See all- CVE-2026-96319High
A use after free in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally. The flaw exists in the USB printer driver code.
- CVE-2026-96310High
Use-after-free vulnerability in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96304High
Use-after-free vulnerability in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96301High
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96254High
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96253High
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96250High
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-58543Medium
In the Windows USB Print Driver, a race condition vulnerability (concurrent execution with improper synchronization) allows an authorized attacker to elevate privileges via a physical attack.
- CVE-2026-50674High
A use-after-free vulnerability in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-55000Medium
Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS