PT-2026-58174 · Microsoft · Windows Server 2025+1

Published 2026-07-14 · Updated 2026-07-15 · CVE-2026-49802

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows 11 (affected versions not specified) Windows Server 2025 (affected versions not specified)

Description A race condition exists in the Windows USB Print Driver. This occurs when concurrent execution using a shared resource happens with improper synchronization, allowing an authorized attacker to elevate privileges locally.

Recommendations Update Windows 11 to the latest patched version. Update Windows Server 2025 to the latest patched version.

Fix

Race Condition

Use After Free

Weakness Enumeration

CWE-362

CWE-416

Related Identifiers

CVE-2026-49802

Affected Products

Windows 11

Windows Server 2025

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-49802 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49802 · Vendor Advisory
• https://twitter.com/windowsforum/status/2077240778925957602 · Twitter Post