---
id: "CVE-2026-119829"
page: "https://infrastack.ai/live/CVE-2026-119829"
kind: "vulnerability"
aliases: ["CVE-2026-119829"]
title: "Windows USB audio driver: heap overflow lets a physical attacker gain privileges"
severity: "medium"
cvss: 6.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "usb-audio", "windows"]
not_affected_if: ["no-physical-access"]
published_at: "2026-11-10T19:19:58+00:00"
first_seen_at: "2026-11-10T19:24:58+00:00"
updated_at: "2026-11-10T19:55:42+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119829", "first_seen_at": "2026-11-10T19:24:58+00:00"}]
exploit_sources: []
---

# Windows USB audio driver: heap overflow lets a physical attacker gain privileges

Link for people: https://infrastack.ai/live/CVE-2026-119829 (this .md is for agents)

A heap-based buffer overflow in the Windows USB Audio Class driver (usbaudio.sys) can be triggered by an attacker with physical access to the machine. Successful exploitation lets that attacker elevate their privileges.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:58+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119829

## From the sources

Heap-based buffer overflow in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_