Executive brief
A security vulnerability exists in the Windows driver responsible for managing USB audio devices like headsets and microphones. An attacker with physical access to a computer could exploit this flaw to view sensitive information stored in the system's memory or cause the device to crash. This could lead to the exposure of private data or a disruption of service for the affected machine.
Technical details
An out-of-bounds read vulnerability exists in the Windows USB Audio Class driver (usbaudio.sys) due to improper bounds checking. An attacker with physical access to the target system can exploit this by connecting a specially crafted USB audio device. Successful exploitation allows the attacker to read sensitive information from kernel memory or trigger a system crash (BSOD), resulting in a denial of service. The vulnerability is tracked as CWE-125 and affects multiple versions of Windows 10, Windows 11, and Windows Server 2012. Microsoft has released security updates to address this issue.
Affected products
- Microsoft Windows 10 1607, 1809, 21H2, 22H2
- Microsoft Windows 11 24H2, 25H2, 26H1
- Microsoft Windows Server 2012 All versions
Timeline
- 2026-07-14: disclosed: Initial publication of the CVE record by Microsoft.
- 2026-07-14: advisory: Microsoft MSRC update guide published.