{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-90975","assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","state":"PUBLISHED","assignerShortName":"certcc","dateReserved":"2026-09-14T13:39:39.619Z","datePublished":"2026-11-06T18:36:42.089Z","dateUpdated":"2026-11-06T19:11:47.406Z"},"containers":{"cna":{"title":"CVE-2026-90975","descriptions":[{"lang":"en","value":"A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kernel I/O control (IOCTL) interface that acts on a caller-supplied user-mode pointer without proper validation or capture. By issuing crafted property requests an attacker can obtain kernel-mode read and write access, which can be leveraged for local privilege escalation and arbitrary kernel code execution."}],"source":{"discovery":"UNKNOWN"},"affected":[{"vendor":"Realtek","product":"RtUsbA64.sys","versions":[{"status":"affected","version":"6.3.9600.2393"}]}],"problemTypes":[{"descriptions":[{"lang":"en","description":"CWE-822"}]}],"references":[{"url":"https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-90975"}],"x_generator":{"engine":"VINCE 4.0.1","env":"prod","origin":"https://cveawg.mitre.org/api/cve/CVE-2026-90975"},"providerMetadata":{"orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc","dateUpdated":"2026-11-06T18:36:42.089Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.kb.cert.org/vuls/id/701544"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2026-11-06T19:11:47.406Z"}}]}}