CVE-2026-119876: Windows USB Scanner Driver Elevation of Privilege Vulnerability

Published Nov 10, 2026

Updated

Heap-based buffer overflow in Windows USB Scanner Driver allows an authorized attacker to elevate privileges locally.

Other sources

Windows USB Scanner Driver Elevation of Privilege Vulnerability

— Microsoft

Affected Software

1 affected component

Microsoft Windows USB Scanner Driver

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

CVE Published

via MITRE·06:23 PM

Data Sourced

via MITRE·06:23 PM

DescriptionSeverity

Data Sourced

via NVD·07:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

An attacker must already be authorized on the affected Windows system and must exploit it locally. The available data does not indicate that remote or unauthenticated attackers can use it.

What is the potential impact of successful exploitation?

Successful exploitation can allow elevation of privileges. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability.

How difficult is exploitation expected to be?

The supplied severity vector rates attack complexity as high and requires low privileges. No user interaction is required.

CVE-2026-119876: Windows USB Scanner Driver Elevation of Privilege Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What is the potential impact of successful exploitation?

How difficult is exploitation expected to be?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What is the potential impact of successful exploitation?

How difficult is exploitation expected to be?