CVE-2026-96041: Windows USB Hub Driver Information Disclosure Vulnerability

Published Nov 10, 2026

Updated

Out-of-bounds read in Windows USB Hub Driver allows an authorized attacker to disclose information locally.

Other sources

Windows USB Hub Driver Information Disclosure Vulnerability

— Microsoft

Affected Software

1 affected component

Microsoft Windows USB Hub Driver

Event History

Nov 10, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeakness

CVE Published

via MITRE·06:17 PM

Data Sourced

via MITRE·06:17 PM

DescriptionSeverity

Data Sourced

via NVD·07:22 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

An attacker must already be authorized on the affected Windows system and must be able to execute actions locally. The provided vector indicates low attack complexity and no user interaction requirement.

What is the security impact?

Successful exploitation can disclose information from the affected system. The supplied severity vector indicates high confidentiality impact, with no stated integrity or availability impact.

Is this remotely exploitable?

No. The attack vector is local, so exploitation requires access to the affected host rather than network-only access.

CVE-2026-96041: Windows USB Hub Driver Information Disclosure Vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What is the security impact?

Is this remotely exploitable?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What is the security impact?

Is this remotely exploitable?