What is the CVSS score of CVE-2026-69571?

CVE-2026-69571 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Microsoft are affected by CVE-2026-69571?

A privilege escalation vulnerability in the Windows USB Audio Class kernel driver affects all supported Windows versions (Server 2012 through Windows 11) and allows authenticated local users to gain…. A patch is available.

How to fix or mitigate CVE-2026-69571?

Within 24 hours, identify all Windows endpoints and servers affected (Server 2012 through Windows 11 26H1) and segregate systems with guest or contractor access as priority targets. Within 7 days, deploy the Microsoft patch for usbaudio.sys across all affected systems through Windows Update or manual security updates. Within 30 days, verify deployment completion, audit local user access policies to restrict unnecessary local logins, and implement application whitelisting on high-value systems to prevent post-exploitation persistence.

Microsoft CVE-2026-69571

EUVD-2026-73535 HIGH

Heap-based Buffer Overflow (CWE-122)

2026-09-08 secure@microsoft.com

GHSA-966r-wv27-mfxg

Buffer Overflow Heap Overflow Microsoft

7.8

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (microsoft) · only source for this CVE.

CVSS VectorVendor: microsoft

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 09, 2026 - 02:22 vuln.today

Patch available

Sep 08, 2026 - 18:35 EUVD

CVE Published

Sep 08, 2026 - 18:19 nvd

HIGH 7.8

DescriptionCVE.org

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

AnalysisAI

Heap-based buffer overflow in the Windows USB Audio Class kernel driver (usbaudio.sys) enables a locally authenticated, low-privileged attacker to escalate privileges to SYSTEM on affected Windows hosts. The vulnerability spans virtually every supported Windows release from Server 2012 through Windows 11 26H1 and requires no user interaction beyond the attacker's own session. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours, identify all Windows endpoints and servers affected (Server 2012 through Windows 11 26H1) and segregate systems with guest or contractor access as priority targets. …

Threat intelligence, references, and detailed analysis are available after sign-in.