{"id":"CVE-2026-90975","published":"2026-11-06T19:17:59.147","lastModified":"2026-11-10T19:21:35.977","description":"A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kernel I/O control (IOCTL) interface that acts on a caller-supplied user-mode pointer without proper validation or capture. By issuing crafted property requests an attacker can obtain kernel-mode read and write access, which can be leveraged for local privilege escalation and arbitrary kernel code execution.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-822"],"vendors":[],"products":[],"references":[{"url":"https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-90975","tags":[]},{"url":"https://www.kb.cert.org/vuls/id/701544","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}