{"id":"CVE-2026-112984","kind":"vulnerability","aliases":["CVE-2026-112984"],"related":[],"title":"Windows USB Video Driver: heap overflow lets a local user gain higher privileges","description":"Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.","summary":"A heap-based buffer overflow in the Windows USB Video Driver lets an authorized attacker raise their privileges. The sources say the attack is physical, so the attacker needs access to the machine and a USB video device.","severity":"medium","cvss":6.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","usb-video-driver","windows"],"not_affected_if":["no-physical-access"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:50+00:00","first_seen_at":"2026-11-10T19:24:37+00:00","triaged_at":"2026-11-10T19:56:05+00:00","updated_at":"2026-11-10T19:56:05+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:56:05Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows USB Video Driver: heap overflow lets a local user gain higher privileges","impact":"high","summary":"A heap-based buffer overflow in the Windows USB Video Driver lets an authorized attacker raise their privileges. The sources say the attack is physical, so the attacker needs access to the machine and a USB video device.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","usb-video-driver"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated privileges on the Windows machine","analyst_note":"Confirm affected Windows builds and whether Microsoft has published a patch via the NVD entry or the Microsoft Security Response Center advisory.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-physical-access"],"who_is_affected":"Windows machines with the USB Video Driver in use are the systems to look at, and only where an attacker with some access can connect a USB device. Sources do not state which Windows versions are affected or whether a patch exists. Machines with no USB camera workflow and tight physical access controls are lower risk.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000683,"input_tokens":4502,"output_tokens":466,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-112984':16A,19A '-2026':15A,18A 'access':56B 'allow':75C 'attack':41B,49B,54B,78C,85C 'author':40B,77C 'base':29B,67C 'buffer':30B,68C 'cve':14A,17A 'devic':64B 'driver':4A,24B,37B,74C 'elev':80C 'gain':11A 'heap':5A,28B,66C 'heap-bas':27B,65C 'higher':12A 'infrastructur':20B 'let':7A,38B 'local':9A 'machin':59B 'need':55B 'overflow':6A,31B,69C 'physic':51B,84C 'privileg':13A,44B,81C 'rais':42B 'say':47B 'sourc':46B 'usb':2A,22B,35B,62B,72C 'usb-video-driv':21B 'user':10A 'video':3A,23B,36B,63B,73C 'window':1A,25B,34B,71C","nicknames":[],"mitigations":[],"who_affected":"Windows machines with the USB Video Driver in use are the systems to look at, and only where an attacker with some access can connect a USB device. Sources do not state which Windows versions are affected or whether a patch exists. Machines with no USB camera workflow and tight physical access controls are lower risk.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","usbvideodriver","windows"],"campaign_type":null,"search_a":"'-112984':16A,19A '-2026':15A,18A 'cve':14A,17A 'driver':4A 'gain':11A 'heap':5A 'higher':12A 'let':7A 'local':9A 'overflow':6A 'privileg':13A 'usb':2A 'user':10A 'video':3A 'window':1A","search_b":"'access':56B 'attack':41B,49B,54B 'author':40B 'base':29B 'buffer':30B 'devic':64B 'driver':24B,37B 'heap':28B 'heap-bas':27B 'infrastructur':20B 'let':38B 'machin':59B 'need':55B 'overflow':31B 'physic':51B 'privileg':44B 'rais':42B 'say':47B 'sourc':46B 'usb':22B,35B,62B 'usb-video-driv':21B 'video':23B,36B,63B 'window':25B,34B","search_c":"'allow':75C 'attack':78C,85C 'author':77C 'base':67C 'buffer':68C 'driver':74C 'elev':80C 'heap':66C 'heap-bas':65C 'overflow':69C 'physic':84C 'privileg':81C 'usb':72C 'video':73C 'window':71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:50+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112984","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112984","severity":null,"published_at":"2026-11-10T19:18:50+00:00","modified_at":"2026-11-10T19:18:50+00:00","first_seen_at":"2026-11-10T19:24:37+00:00","fetched_at":"2026-11-10T19:24:37+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}