CVE-2026-85807
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
An integer overflow or wraparound in the Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
Risk Assessment
A locally authenticated attacker can exploit this flaw to gain higher privileges, potentially leading to full compromise of the affected host.
Recommendation
Install the latest Windows security updates covering the USB Video Driver and limit local access to untrusted users.
Other vulnerabilities in Windows USB Video Driver
See all- CVE-2026-85341High
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-72962High
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69584High
Integer overflow or wraparound in the Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69423High
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69422High
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-69319High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-49804Medium
A heap-based buffer overflow in the Windows USB Video Driver allows an unauthorized attacker to elevate privileges through a physical attack.
- CVE-2025-55676Medium
Generation of error messages containing sensitive information in Windows USB Video Driver allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS