Main Vulnerability Database Vulnerabilities #VU138156

Race condition in Microsoft Windows and Windows Server - CVE-2026-58543

Published: July 17, 2026

Vulnerability identifier: #VU138156

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-58543

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows an attacker with physical access to escalate privileges.

The vulnerability exists due to concurrent execution using shared resource with improper synchronization in Windows USB Print Driver when handling concurrent operations. An attacker with physical access can trigger a race condition to escalate privileges.

Successful exploitation could result in SYSTEM privileges.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2026-58543

Install security update from vendor's website.

Microsoft Windows - addressed in versions 11 24H2 10.0.26100.8875, 11 26H1 10.0.28000.2525
Windows Server - addressed in versions 2012 R2 6.3.9600.23291, 2025 10.0.26100.33158

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-58543

Related Security Bulletins