NetSight
high7.8

CVE-2026-50479

Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

Impact

Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 10 1809
before 10.0.17763.9020
MicrosoftWindows 10 21h2
before 10.0.19044.7548
MicrosoftWindows 10 22h2
before 10.0.19045.7548
MicrosoftWindows Server 2019
before 10.0.17763.9020
MicrosoftWindows Server 2022
before 10.0.20348.5386
MicrosoftWindows Server 2025
before 10.0.26100.33158
MicrosoftWindows 10 Version 1809
from 10.0.17763.0 before 10.0.17763.9020
MicrosoftWindows 10 Version 21H2
from 10.0.19044.0 before 10.0.19044.7548
MicrosoftWindows 10 Version 22H2
from 10.0.19045.0 before 10.0.19045.7548
MicrosoftWindows Server 2019
from 10.0.17763.0 before 10.0.17763.9020
MicrosoftWindows Server 2019 (Server Core Installation)
from 10.0.17763.0 before 10.0.17763.9020
MicrosoftWindows Server 2022
from 10.0.20348.0 before 10.0.20348.5386
MicrosoftWindows Server 2025
from 10.0.26100.0 before 10.0.26100.33158
MicrosoftWindows Server 2025 (Server Core Installation)
from 10.0.26100.0 before 10.0.26100.33158

Weakness classification

References