ThreatCluster

Multiple CVEs Affect USB Device Drivers in 2024 and 2025

First seen 18 Feb 2026, 13:23 UTC Api.Msrc.Microsoft 46

Article Content

Browse articles
ThreatCluster

Two vulnerabilities have been reported affecting USB device drivers. CVE-2024-46674, published on September 13, 2024, addresses issues with the reference count of probed platform devices. CVE-2025-37810, published on May 8, 2025, ensures that the event count does not exceed the event buffer length in USB drivers.

Timeline

2024-09-13
CVE-2024-46674 published
2025-05-08
CVE-2025-37810 published
2026-02-18
Information published on both vulnerabilities