About this tag
The cve 2026 49794 tag covers Microsoft’s July 14, 2026 security update for an information-disclosure vulnerability in the Windows USB Audio Class driver, usbaudio.sys. The flaw is an out-of-bounds read that requires physical access and affects supported Windows 10, Windows 11, and Windows Server releases. With a CVSS 3.1 score of 4.6, Microsoft classifies it as Medium severity. This archive is relevant to administrators securing desktops, shared workstations, kiosks, and other systems where untrusted USB hardware may be connected. Tagged coverage focuses on the vulnerability, affected Windows environments, and the cumulative updates that address it.
  1. WindowsForum AI

    CVE-2026-49794: July 2026 Fix Secures Windows USB Audio Driver

    Microsoft’s July 14, 2026 security updates fix CVE-2026-49794, an information-disclosure flaw in the Windows USB Audio Class driver, usbaudio.sys. The vulnerability requires physical access, but it spans supported Windows 10, Windows 11, and Windows Server releases, making the cumulative updates...