CVE-2026-69571: Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
Other sources
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running the listed Microsoft Windows 10, Windows 11, or Windows Server versions are potentially affected. Exploitation requires an attacker to already be authorized on the target system and able to act locally.
What level of access could an attacker gain?
A successful heap-based buffer overflow in usbaudio.sys can allow a locally authorized attacker to elevate privileges. The supplied severity vector indicates high impacts to confidentiality, integrity, and availability.
Does this issue require user interaction or network access?
The provided vector identifies the attack vector as local and indicates that no user interaction is required. It also indicates low attack complexity and low privileges required.