CVE-2026-58543
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
In the Windows USB Print Driver, a race condition vulnerability (concurrent execution with improper synchronization) allows an authorized attacker to elevate privileges via a physical attack.
Risk Assessment
Risk of privilege escalation by an attacker with physical access, potentially leading to full system compromise.
Recommendation
Apply the security update from Microsoft if available, or restrict physical access to devices.
Other vulnerabilities in Windows USB Print Driver
See all- CVE-2026-50674High
A use-after-free vulnerability in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-55000Medium
Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
- CVE-2026-54996High
A race condition vulnerability has been found in the Windows USB Print Driver during concurrent access to a shared resource. This flaw allows an authorized attacker to elevate privileges locally.
- CVE-2026-54991High
A race condition vulnerability in the Windows USB Print Driver allows an authorized local attacker to elevate privileges by exploiting improper synchronization of a shared resource.
- CVE-2026-54111High
A race condition in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-49806High
A race condition in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-49802High
A race condition in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-32223Medium
A heap-based buffer overflow in the Windows USB Print Driver allows an unauthorized attacker to elevate privileges through a physical attack.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges with a physical attack.