CVE-2026-83638
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
This flaw enables a locally authenticated attacker to escalate privileges, potentially resulting in code execution with system-level rights.
Recommendation
Promptly deploy Microsoft patches for Windows USB Driver and monitor for unusual local user activity.
Other vulnerabilities in Windows USB Driver
See all- CVE-2026-85935Medium
Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally. The vulnerability may result in leakage of memory data.
- CVE-2026-83588High
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-72953High
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69503High
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69457Medium
An out-of-bounds read vulnerability in the Windows USB Driver allows an authorized attacker to disclose information locally.
- CVE-2026-69295High
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-68840High
A race condition exists in the Windows USB Driver due to improper synchronization of shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-61926High
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-50321High
A race condition in Windows USB Driver allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS