CVE-2026-32223: Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Other sources
Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.1836Patch KB5083768 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.8246Patch KB5083769 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.32690Patch KB5082063 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.8246Patch KB5083769
Event History
Frequently Asked Questions
What is the severity of CVE-2026-32223?
CVE-2026-32223 is classified as an Elevation of Privilege vulnerability that allows an unauthorized attacker to gain elevated privileges on affected Windows systems.
How do I fix CVE-2026-32223?
To fix CVE-2026-32223, users should apply the recommended security updates provided by Microsoft.
What systems are affected by CVE-2026-32223?
CVE-2026-32223 affects various versions of Microsoft Windows 11 and Windows Server 2025.
Can CVE-2026-32223 be exploited remotely?
CVE-2026-32223 requires physical access to the affected system for exploitation.
What type of attack is associated with CVE-2026-32223?
CVE-2026-32223 involves a heap-based buffer overflow vulnerability in the Windows USB Print Driver.