Executive brief
A race condition vulnerability in Windows USB Driver allows an authorized attacker to escalate privileges on a local system. An attacker with existing system access could exploit this to gain elevated administrative rights, potentially compromising system security and data protection.
Technical details
This vulnerability is a concurrent execution race condition in shared resources within the Windows USB Driver due to improper synchronization. The race condition can be triggered by an authorized local attacker to elevate privileges. No patch information is currently available in the advisory, but Microsoft has been notified as indicated by the MSRC reference. The attack requires local access and existing authorization on the target system.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed