CVE NVD 5h ago

Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor: Microsoft
Product: Windows 10 Version 1607, Windows 10 Version 1809, Windows 10 Version 21H2
CVSS v3.1: 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-122
Exposure class: Operating system
NVD status: Awaiting Analysis

Why it ranks 42 (Notable)

CVSS v3.1 7.8 high
Product class: operating system
Widely deployed vendor product (Microsoft)
Covered by 2 independent sources
Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.

Related coverage

Other items that share a CVE or were clustered with this one.

36

CVE NVD 5h ago

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-95974 Microsoft
36

CVE NVD 5h ago

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95965 Microsoft
36

CVE NVD 5h ago

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95951 Microsoft
36

CVE NVD 5h ago

Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95948 Microsoft
42

CVE NVD 5h ago

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-95938 Microsoft
42

CVE NVD 5h ago

Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95935 Microsoft
42

CVE NVD 5h ago

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95933 Microsoft
42

CVE NVD 5h ago

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-95923 Microsoft
42

CVE NVD 5h ago

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-95922 Microsoft
36

CVE NVD 5h ago

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95920 Microsoft
42

CVE NVD 5h ago

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95898 Microsoft
42

CVE NVD 5h ago

Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95894 Microsoft
36

CVE NVD 5h ago

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-95888 Microsoft
36

CVE NVD 5h ago

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95881 Microsoft
36

CVE NVD 5h ago

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95877 Microsoft
42

CVE NVD 5h ago

Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95874 Microsoft
42

CVE NVD 5h ago

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-95872 Microsoft
36

CVE NVD 5h ago

Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-95871 Microsoft
36

CVE NVD 5h ago

Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.

CVSS 7.8 CVE-2026-94531 Microsoft
36

CVE NVD 5h ago

Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVSS 7.0 CVE-2026-94529 Microsoft

Heap-based buffer overflow in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

Links

Related coverage

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Task Scheduler allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Xbox allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

Keyboard