CVE-2026-54991
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A race condition vulnerability in the Windows USB Print Driver allows an authorized local attacker to elevate privileges by exploiting improper synchronization of a shared resource.
Risk Assessment
An attacker could gain elevated privileges, potentially leading to control over sensitive data or further escalation of the attack.
Recommendation
Apply the security update provided by the vendor (Microsoft) for the USB Print Driver immediately.
Other vulnerabilities in Windows USB Print Driver
See all- CVE-2026-58543Medium
In the Windows USB Print Driver, a race condition vulnerability (concurrent execution with improper synchronization) allows an authorized attacker to elevate privileges via a physical attack.
- CVE-2026-50674High
A use-after-free vulnerability in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-55000Medium
Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- CVE-2026-54996High
A race condition vulnerability has been found in the Windows USB Print Driver during concurrent access to a shared resource. This flaw allows an authorized attacker to elevate privileges locally.
- CVE-2026-54111High
A race condition in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-49806High
A race condition in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-49802High
A race condition in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-32223Medium
A heap-based buffer overflow in the Windows USB Print Driver allows an unauthorized attacker to elevate privileges through a physical attack.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.