Microsoft Windows USB Audio Class Driver Information Disclosure Vulnerability

A vulnerability allowing out-of-bounds read has been identified in the Windows USB Audio Class driver (usbaudio.sys). This issue could enable an unauthorized attacker to disclose information, but it requires a physical attack to exploit.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5099538, KB5099444, KB5101650, KB5099536, KB5099540, and KB5095051.