Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-15 | 1 | PoC1 |
| 2026-04-17 | 1 | Disclosure1 |
| 2026-04-24 | 1 | Disclosure1 |
| 2026-04-25 | 3 | Disclosure2PoC1 |
| 2026-04-27 | 1 | PoC1 |
‼️ CVE-2026-32223: Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability https://t.co/jJaev33cGh
Post summary
The post announces the discovery of a new elevation‑of‑privilege vulnerability in Windows' USB printing stack, providing minimal technical details without any PoC, exploit, or mitigation information.
[1/2] CVE-2026-32223: heap overflow in usbprint.sys (IOCTL 0x220064). Malformed USB descriptor, Named Pipe spray + Ghost Chunk for kernel leak, forged IRP, SYSTEM. Writeup: https://www.enki.co.kr/en/media-center/blog/plug-me-if-you-can-exploiting-usb-printer-drivers-in-windows #CVE_2026_32223 #WindowsKernel #LPE #vulnresearch
Post summary
The post announces CVE‑2026‑32223, shares a writeup with a proof‑of‑concept, detailing exploitation techniques but does not mention active exploitation or patches.
I’ve successfully reproduced the CVE-2026-32223. If I get the opportunity, I’ll put together a detailed write-up. https://t.co/UXTGFjMk8m
Post summary
The author confirms having reproduced CVE‑2026‑32223 and intends to produce a write‑up, indicating a PoC has been developed, but no exploit tool, patch, technical details, or evidence of active exploitation is provided.
Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability CVE-2026-32223 http://youtube.com/@NullSecurityX https://t.co/YqVUt7DHFu
Post summary
The post announces an elevation‑of‑privilege vulnerability (CVE‑2026‑32223) in Windows USB printing stack, accompanied by generic links to a YouTube channel and a tweet.
We released a demo video(https://youtu.be/BXbc_WBIb74) for the CVE-2026-32223 Windows USB Printing Stack (usbprint.sys) Elevation of Privilege Vulnerability, patched by Microsoft in Apr 2026. Watch the video and subscribe to our private vulnerability PoC and detailed report service at http://Patchpoint.io.
Post summary
A demo video showcasing CVE-2026-32223 is released, offering a private PoC and detailed report, with Microsoft’s patch noted for April 2026.
CVE-2026-32223 USB printing stack #BıgBounty #CyberSecurity #windows
Post summary
A brief post announces CVE-2026-32223 as a vulnerability in Windows USB printing stack, but offers no further technical detail or evidence of exploitation.
CVE-2026-32223 Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack. https://www.cve.org/CVERecord?id=CVE-2026-32223
Post summary
The post announces CVE‑2026‑32223, describing a heap-based buffer overflow that permits privilege escalation via a physical attack, without indicating PoC, exploit, or patch details.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_11_24h2 | - | - | arm64 |
| OS | microsoft | windows_11_24h2 | - | - | x64 |
| OS | microsoft | windows_11_25h2 | - | - | arm64 |
| OS | microsoft | windows_11_25h2 | - | - | x64 |
| OS | microsoft | windows_11_26h1 | - | - | arm64 |
| OS | microsoft | windows_11_26h1 | - | - | x64 |
| OS | microsoft | windows_server_2025 | - | - | - |