{"id":"CVE-2026-95961","kind":"vulnerability","aliases":["CVE-2026-95961"],"related":[],"title":"Windows USB Video Driver: double free lets a local user gain higher privileges","description":"Double free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.","summary":"A double free bug in the Windows USB Video Driver lets an attacker who already has a local account raise their privileges. The sources do not describe a remote path.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","local-privilege-escalation","usb-video-driver","windows"],"not_affected_if":[],"how_to_check":"unknown: the Microsoft entry was unreadable. Check Windows Update history for the November 2026 cumulative update (released 2026-11-10) and compare your build to the MSRC entry for CVE-2026-95961.","fix":"Install the November 2026 Windows security update (released 2026-11-10). The exact KB and build numbers are unknown until the MSRC entry is read.","status":"open","published_at":"2026-11-10T19:21:50+00:00","first_seen_at":"2026-11-10T19:25:25+00:00","triaged_at":"2026-11-10T19:49:46+00:00","updated_at":"2026-11-10T20:19:00+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-11-10T19:49:46Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows USB Video Driver: double free lets a local user gain higher privileges","impact":"high","summary":"A double free bug in the Windows USB Video Driver lets an attacker who already has a local account raise their privileges. The sources do not describe a remote path.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","usb-video-driver"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains SYSTEM-level privileges on the machine","analyst_note":"Find the Microsoft Security Update Guide entry for CVE-2026-95961 to get affected Windows builds and the patch.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Windows machines with the USB Video Driver (usbvideo) present, where a user with a local logon could run code to escalate privileges. The sources do not list affected Windows builds or what configuration matters. unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000651,"input_tokens":4480,"output_tokens":405,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the Microsoft Security Update Guide entry for CVE-2026-95961 to get affected Windows builds and the patch.","search":"'-2026':15A,18A '-95961':16A,19A 'account':48B 'allow':67C 'alreadi':44B 'attack':42B,70C 'author':69C 'bug':33B 'cve':14A,17A 'describ':56B 'doubl':5A,31B,60C 'driver':4A,28B,39B,66C 'elev':72C 'escal':24B 'free':6A,32B,61C 'gain':11A 'higher':12A 'infrastructur':20B 'let':7A,40B 'local':9A,22B,47B,74C 'local-privilege-escal':21B 'path':59B 'privileg':13A,23B,51B,73C 'rais':49B 'remot':58B 'sourc':53B 'usb':2A,26B,37B,64C 'usb-video-driv':25B 'user':10A 'video':3A,27B,38B,65C 'window':1A,29B,36B,63C","nicknames":[],"mitigations":[],"who_affected":"Windows machines with the USB Video Driver (usbvideo) present, where a user with a local logon could run code to escalate privileges. The sources do not list affected Windows builds or what configuration matters. unknown","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":"Install the latest Windows updates: Settings > Windows Update > Check for updates.","pkeys":[],"ptokens":[],"labels":["high","infrastructure","localprivilegeescalation","usbvideodriver","windows"],"campaign_type":null,"search_a":"'-2026':15A,18A '-95961':16A,19A 'cve':14A,17A 'doubl':5A 'driver':4A 'free':6A 'gain':11A 'higher':12A 'let':7A 'local':9A 'privileg':13A 'usb':2A 'user':10A 'video':3A 'window':1A","search_b":"'account':48B 'alreadi':44B 'attack':42B 'bug':33B 'describ':56B 'doubl':31B 'driver':28B,39B 'escal':24B 'free':32B 'infrastructur':20B 'let':40B 'local':22B,47B 'local-privilege-escal':21B 'path':59B 'privileg':23B,51B 'rais':49B 'remot':58B 'sourc':53B 'usb':26B,37B 'usb-video-driv':25B 'video':27B,38B 'window':29B,36B","search_c":"'allow':67C 'attack':70C 'author':69C 'doubl':60C 'driver':66C 'elev':72C 'free':61C 'local':74C 'privileg':73C 'usb':64C 'video':65C 'window':63C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:50+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95961","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95961","severity":null,"published_at":"2026-11-10T19:21:50+00:00","modified_at":"2026-11-10T19:21:50+00:00","first_seen_at":"2026-11-10T19:25:25+00:00","fetched_at":"2026-11-10T19:25:25+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95961:2640","url":null,"severity":null,"published_at":"2026-11-10T20:19:00+00:00","modified_at":"2026-11-10T20:19:00+00:00","first_seen_at":"2026-11-10T20:19:00+00:00","fetched_at":"2026-11-10T20:19:00+00:00","note":"Part of Microsoft's November 2026 Patch Tuesday (released 2026-11-10; the MSRC feed lists it in 2026-Nov). I could not read the MSRC entry. It loads only through JavaScript, the CVRF document came back empty, and the browser is out of minutes. NVD and cve.org returned no content. Affected builds and fix KB are unknown. To settle it, open the MSRC Security Update Guide entry or the 2026-Nov CVRF. Nothing is marked verified. Nothing found on exploitation or a PoC; I did not search social posts."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}