Executive brief
The Windows USB Audio Class driver (usbaudio.sys) contains a heap-based buffer overflow vulnerability that allows an authorized local attacker to execute code with elevated privileges. An attacker with local system access could exploit this flaw to gain administrative control, enabling malware installation, data theft, or system compromise. This represents a significant privilege escalation risk for systems with multiple user accounts.
Technical details
A heap-based buffer overflow exists in the Windows USB Audio Class driver (usbaudio.sys), a core component responsible for managing USB audio devices. The vulnerability is triggered through a local attack vector and requires the attacker to already possess local system access (authorized user). Exploitation allows privilege escalation from a standard user context to system or administrative privileges. The flaw stems from insufficient bounds checking when processing audio-related operations on USB devices. No evidence of active exploitation in the wild has been reported, but patches are expected from Microsoft.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed