CVE-2026-70008

HighCVSS 7.8

Published: 13/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

26th percentile - higher than 26% of all known CVEs

Summary

An integer overflow or wraparound exists in the Windows IP Over USB Service. An authorized attacker can exploit this vulnerability to elevate privileges locally.

Risk Assessment

An attacker with valid credentials could elevate their privileges on the system, potentially leading to full host compromise. This requires prior local access to the machine.

Recommendation

Immediately apply Microsoft security updates for the Windows IP Over USB Service. Additionally, restrict local system access to trusted users only.

Other vulnerabilities in Windows IP Over USB Service

CVE-2026-70011Medium
Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.

Original NVD description (English source)

Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS