SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-69859

HIGH · CVSS 7 EPSS 0.19%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A time-of-check time-of-use (TOCTOU) race condition in the Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to exploit this vulnerability to elevate their privileges locally. This high-severity flaw poses significant risks to system integrity and should be prioritized by organizations using affected Windows systems, particularly those with users who have access to USB audio devices. Immediate patching and mitigation strategies are recommended to prevent potential exploitation.

CVE
CVE-2026-69859
Severity
HIGH
CVSS
7
EPSS
0.19%
Windows

Original NVD Description

Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Related CVEs

Other vulnerabilities affecting the same vendor(s)