Executive brief
A vulnerability exists in the Windows driver responsible for managing USB audio devices like headsets and speakers. An attacker with physical access to a computer could exploit this flaw to access sensitive information stored in the system's memory. This could lead to the exposure of private data, though it requires the attacker to be physically present at the device.
Technical details
An out-of-bounds read vulnerability (CWE-125) exists in the Windows USB Audio Class driver (usbaudio.sys). The flaw is triggered when the driver improperly handles memory boundaries during the processing of USB audio requests. An attacker with physical access to the target machine can exploit this by connecting a specially crafted USB device to disclose sensitive information from kernel memory. The vulnerability affects multiple versions of Windows 10, Windows 11, and Windows Server 2012. Microsoft has released security updates to address this issue.
Affected products
- Microsoft Windows 10 1607, 1809, 21H2, 22H2
- Microsoft Windows 11 24H2, 25H2, 26H1
- Microsoft Windows Server 2012 Standard, Server Core
Timeline
- 2026-07-14: disclosed
- 2026-07-14: advisory