CVE-2026-69469
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
An integer overflow or wraparound in the Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
Risk Assessment
A physical attack could allow an attacker to gain elevated privileges on the system, potentially leading to full device compromise.
Recommendation
Install the latest Windows security updates that include a fix for this driver.
Other vulnerabilities in Windows USB Audio Class driver
See all- CVE-2026-69859High
A time-of-check time-of-use (TOCTOU) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
- CVE-2026-69707High
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
- CVE-2026-69687High
Integer underflow (wrap or wraparound) in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
- CVE-2026-69571High
Heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
- CVE-2026-69413High
Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
- CVE-2026-69307High
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
- CVE-2026-69286Medium
A vulnerability in the Windows USB Audio Class driver (usbaudio.sys) causes an out-of-bounds read, allowing an authorized attacker to disclose information locally.
- CVE-2026-69270High
A heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
- CVE-2026-58528Medium
Out-of-bounds read in the Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information via a physical attack.
- CVE-2026-50453Medium
An out-of-bounds read vulnerability in the Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information via a physical attack.
Original NVD description (English source)
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS