CVE-2026-49802 - Windows USB Print Driver Elevation of Privilege Vulnerability

Back Back to CVE browser

HIGH

Windows USB Print Driver Elevation of Privilege Vulnerability

Published Jul 14, 2026

7.0

HIGH

CVSS 3.1

EPSS 0.20%

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.

Affected products

Vendor Microsoft Product Windows 11 Version 24H2 Default
n/a
- Version
  10.0.26100.0
  Status
  affected
  Constraints
  <10.0.26100.8875
Vendor Microsoft Product Windows 11 Version 25H2 Default
n/a
- Version
  10.0.26200.0
  Status
  affected
  Constraints
  <10.0.26200.8875
Vendor Microsoft Product Windows 11 version 26H1 Default
n/a
- Version
  10.0.28000.0
  Status
  affected
  Constraints
  <10.0.28000.2525
Vendor Microsoft Product Windows Server 2025 Default
n/a
- Version
  10.0.26100.0
  Status
  affected
  Constraints
  <10.0.26100.33158
Vendor Microsoft Product Windows Server 2025 (Server Core installation) Default
n/a
- Version
  10.0.26100.0
  Status
  affected
  Constraints
  <10.0.26100.33158

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows 11 Version 24H2

n/a

Version	Status	Constraints
10.0.26100.0	affected	<10.0.26100.8875

Microsoft

Windows 11 Version 25H2

n/a

Version	Status	Constraints
10.0.26200.0	affected	<10.0.26200.8875

Microsoft

Windows 11 version 26H1

n/a

Version	Status	Constraints
10.0.28000.0	affected	<10.0.28000.2525

Microsoft

Windows Server 2025

n/a

Version	Status	Constraints
10.0.26100.0	affected	<10.0.26100.33158

Microsoft

Windows Server 2025 (Server Core installation)

n/a

Version	Status	Constraints
10.0.26100.0	affected	<10.0.26100.33158

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-362

Race Condition

CWE-416

Use After Free

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43823
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49802
vendor-advisorypatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43823		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49802		vendor-advisorypatchVendor Advisory