CVE-2026-54996
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A race condition vulnerability has been found in the Windows USB Print Driver during concurrent access to a shared resource. This flaw allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with limited privileges can exploit this vulnerability to gain higher privileges on the system, potentially leading to control over sensitive data or further attack escalation.
Recommendation
Apply the security update provided by the Windows vendor immediately. Additionally, restrict USB device connection access to trusted users only.
Other vulnerabilities in Windows USB Print Driver
See all- CVE-2026-58543Medium
In the Windows USB Print Driver, a race condition vulnerability (concurrent execution with improper synchronization) allows an authorized attacker to elevate privileges via a physical attack.
- CVE-2026-50674High
A use-after-free vulnerability in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-55000Medium
Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- CVE-2026-54991High
A race condition vulnerability in the Windows USB Print Driver allows an authorized local attacker to elevate privileges by exploiting improper synchronization of a shared resource.
- CVE-2026-54111High
A race condition in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-49806High
A race condition in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-49802High
A race condition in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-32223Medium
A heap-based buffer overflow in the Windows USB Print Driver allows an unauthorized attacker to elevate privileges through a physical attack.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.