CVE-2026-58543
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
In the Windows USB Print Driver, a race condition vulnerability (concurrent execution with improper synchronization) allows an authorized attacker to elevate privileges via a physical attack.
Risk Assessment
Risk of privilege escalation by an attacker with physical access, potentially leading to full system compromise.
Recommendation
Apply the security update from Microsoft if available, or restrict physical access to devices.
Other vulnerabilities in Windows USB Print Driver
See all- CVE-2026-96319High
A use after free in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally. The flaw exists in the USB printer driver code.
- CVE-2026-96310High
Use-after-free vulnerability in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96304High
Use-after-free vulnerability in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96301High
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96254High
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96253High
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96250High
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-50674High
A use-after-free vulnerability in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-55000Medium
Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- CVE-2026-54996High
A race condition vulnerability has been found in the Windows USB Print Driver during concurrent access to a shared resource. This flaw allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS