Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (Microsoft Windows 10 Version 1607)

CVE-2026-69707
HIGH 7.8

En bref

Source
NVD
EPSS
EPSS 0.33 % · centile 27 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
microsoft
Statut NVD
Analyzed

Rechercher sur…

Description

Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

Faiblesses (CWE)

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:Cmicrosoft
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · secure@microsoft.com (Secondary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Microsoft · Windows 10 Version 1607affected 10.0.14393.0 < 10.0.14393.9512
Microsoft · Windows 10 Version 1809affected 10.0.17763.0 < 10.0.17763.9245
Microsoft · Windows 10 Version 21H2affected 10.0.19044.0 < 10.0.19044.7725
Microsoft · Windows 10 Version 22H2affected 10.0.19045.0 < 10.0.19045.7725
Microsoft · Windows 11 version 23H2affected 10.0.22631.0 < 10.0.22631.7582
Microsoft · Windows 11 Version 23H2affected 10.0.22631.0 < 10.0.22631.7582
Microsoft · Windows 11 Version 24H2affected 10.0.26100.0 < 10.0.26100.9445
Microsoft · Windows 11 Version 25H2affected 10.0.26200.0 < 10.0.26200.9445
Microsoft · Windows 11 version 26H1affected 10.0.28000.0 < 10.0.28000.2954
Microsoft · Windows Server 2012affected 6.2.9200.0 < 6.2.9200.26349
Microsoft · Windows Server 2012 (Server Core installation)affected 6.2.9200.0 < 6.2.9200.26349
Microsoft · Windows Server 2012 R2affected 6.3.9600.0 < 6.3.9600.23398
Microsoft · Windows Server 2012 R2 (Server Core installation)affected 6.3.9600.0 < 6.3.9600.23398
Microsoft · Windows Server 2016affected 10.0.14393.0 < 10.0.14393.9512
Microsoft · Windows Server 2016 (Server Core installation)affected 10.0.14393.0 < 10.0.14393.9512
Microsoft · Windows Server 2019affected 10.0.17763.0 < 10.0.17763.9245
Microsoft · Windows Server 2019 (Server Core installation)affected 10.0.17763.0 < 10.0.17763.9245
Microsoft · Windows Server 2022affected 10.0.20348.0 < 10.0.20348.5622
Microsoft · Windows Server 2025affected 10.0.26100.0 < 10.0.26100.33438
Microsoft · Windows Server 2025 (Server Core installation)affected 10.0.26100.0 < 10.0.26100.33438

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD