CVE-2026-58543: Universal Print Management Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges with a physical attack.
Other sources
Universal Print Management Service Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.8875Patch KB5101650 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2525Patch KB5101649 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33158Patch KB5099536 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.8875Patch KB5101650
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker must already be authorized and must carry out a physical attack. The provided data does not indicate that unauthenticated or purely remote exploitation is possible.
Which systems should be prioritized for triage?
Prioritize Microsoft Windows 11 and Microsoft Windows Server 2025 systems that use the Microsoft Windows USB Print Driver. The listed Windows 11 releases are 24H2, 25H2, and 26H1.
What is the likely impact if exploitation succeeds?
Successful exploitation allows elevation of privilege. The supplied vector also rates confidentiality, integrity, and availability impact as high.