{"affected":[{"product":"RtUsbA64.sys","source":"CNA: certcc","vendor":"Realtek","versions":[{"status":"affected","version":"6.3.9600.2393"}]}],"cveId":"CVE-2026-90975","cwes":["CWE-822"],"description":"A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kernel I/O control (IOCTL) interface that acts on a caller-supplied user-mode pointer without proper validation or capture. By issuing crafted property requests an attacker can obtain kernel-mode read and write access, which can be leveraged for local privilege escalation and arbitrary kernel code execution.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793992307406,"publishedAt":1793990202089,"references":[{"source":"CNA: certcc","tags":[],"url":"https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2026-90975"},{"source":"ADP: CVE","tags":[],"url":"https://www.kb.cert.org/vuls/id/701544"}],"remediation":[],"revision":"bd95cb929ffe1d6ee3a0c59788b1cfb1de61155b06c4f36e2faf75401930da97","sources":[{"modifiedAt":1793992307406,"name":"CNA: certcc","retrievedAt":1793995904220,"url":"https://www.cve.org/CVERecord?id=CVE-2026-90975"}],"ssvc":null,"status":"published","title":"CVE-2026-90975","updatedAt":1793995904220}