SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-69307

HIGH · CVSS 7.8 EPSS 0.32%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A heap-based buffer overflow vulnerability in the Windows USB Audio Class driver (usbaudio.sys) enables an authorized attacker to escalate privileges locally, potentially allowing them to execute arbitrary code with elevated permissions. Organizations using affected Windows systems should prioritize this issue, as it poses a significant risk of unauthorized access and control over critical system functions. Immediate patching or mitigation strategies are recommended to safeguard against potential exploitation.

CVE
CVE-2026-69307
Severity
HIGH
CVSS
7.8
EPSS
0.32%
Windows

Original NVD Description

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Related CVEs

Other vulnerabilities affecting the same vendor(s)