---
id: "CVE-2026-112984"
page: "https://infrastack.ai/live/CVE-2026-112984"
kind: "vulnerability"
aliases: ["CVE-2026-112984"]
title: "Windows USB Video Driver: heap overflow lets a local user gain higher privileges"
severity: "medium"
cvss: 6.6
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "usb-video-driver", "windows"]
not_affected_if: ["no-physical-access"]
published_at: "2026-11-10T19:18:50+00:00"
first_seen_at: "2026-11-10T19:24:37+00:00"
updated_at: "2026-11-10T19:56:05+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112984", "first_seen_at": "2026-11-10T19:24:37+00:00"}]
exploit_sources: []
---

# Windows USB Video Driver: heap overflow lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-112984 (this .md is for agents)

A heap-based buffer overflow in the Windows USB Video Driver lets an authorized attacker raise their privileges. The sources say the attack is physical, so the attacker needs access to the machine and a USB video device.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:37+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112984

## From the sources

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_