CVE-2026-96860
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. The flaw results from improper validation of data read boundaries.
Risk Assessment
An authenticated user could locally read data beyond the intended buffer, potentially leading to leakage of sensitive information.
Recommendation
Apply security updates for the Windows USB Print Driver and restrict access to USB printing functionality.
Other vulnerabilities in Windows USB Print Driver
See all- CVE-2026-96319High
A use after free in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally. The flaw exists in the USB printer driver code.
- CVE-2026-96310High
Use-after-free vulnerability in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96304High
Use-after-free vulnerability in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96301High
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96254High
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96253High
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-96250High
Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-58543Medium
In the Windows USB Print Driver, a race condition vulnerability (concurrent execution with improper synchronization) allows an authorized attacker to elevate privileges via a physical attack.
- CVE-2026-50674High
A use-after-free vulnerability in the Windows USB Print Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-55000Medium
Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Original NVD description (English source)
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS