Unrated
CVE-2026-69859 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Type: advisorySources: Microsoft security updates
A time-of-check time-of-use race condition in the Windows USB Audio Class driver may let an authorized attacker elevate privileges locally.
- Products
- Windows USB Audio Class driver (usbaudio.sys)
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-69859
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 7 Nov 2026, 00:53 UTC · Revision 1
Source evidence
CVE-2026-69859 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
official-microsoft-security-updates · Original sourcePublished 8 Sept 2026, 14:00 UTC
A time-of-check time-of-use race condition in the Windows USB Audio Class driver may let an authorized attacker elevate privileges locally.
Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
Windows USB Audio Class driver (usbaudio.sys)
Fixed versions: Not specified
Prerequisites: authorized attacker
Complete source record
{
"id": "96f4ee79bd33850c84bed23f837ddd8491cb07a60b3ba2fece3a3dbdbe98158d",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69859",
"method": "llm",
"payload": {
"kind": "advisory",
"title": "CVE-2026-69859 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability",
"summary": "A time-of-check time-of-use race condition in the Windows USB Audio Class driver may let an authorized attacker elevate privileges locally.",
"evidence": "Time-of-check time-of-use (toctou) race condition in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.",
"products": [
{
"name": {
"value": "Windows USB Audio Class driver (usbaudio.sys)",
"evidence": "Windows USB Audio Class driver (usbaudio.sys)"
},
"prerequisites": [
{
"value": "authorized attacker",
"evidence": "allows an authorized attacker to elevate privileges locally"
}
],
"fixed_versions": [],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [
{
"value": "CVE-2026-69859",
"evidence": "CVE-2026-69859 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "official-microsoft-security-updates",
"document_id": 26547,
"published_at": "2026-09-08T14:00:00+00:00"
}