CVE-2026-69457
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
An out-of-bounds read vulnerability in the Windows USB Driver allows an authorized attacker to disclose information locally.
Risk Assessment
An attacker with local access could obtain sensitive data, potentially leading to a breach of system confidentiality.
Recommendation
Install the latest security updates from Microsoft.
Other vulnerabilities in Windows USB Driver
See all- CVE-2026-72953High
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69503High
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69295High
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-68840High
A race condition exists in the Windows USB Driver due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-61926High
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-50321High
A race condition in Windows USB Driver allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS