OESA-2026-3166 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

PT-2026-67247

Name of the Vulnerable Software and Affected Versions FluidSynth affected versions not specified Description A heap-based buffer overflow exists in the MIDI player. When the synthesizer is configured with the synth.midi-channels variable set to a value greater than 16, an out-of-bounds memory...

CVE-2026-64029

A flaw was found in the Advanced Linux Sound Architecture ALSA sequencer component of the Linux kernel. This vulnerability, a use-after-free, occurs because of improper synchronization when handling Universal MIDI Packet UMP output. A local attacker could exploit this by creating a specific timin...

PT-2026-61346

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA sequencer where seq ump process event accesses client-out rfile.output without proper synchronization during the transition between the first-open and...

EUVD-2026-43831

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-50342

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-56187 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

CVE-2026-56187 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

CVE-2026-56187

CVE-2026-56187 affects the Windows MIDI Service Module and is a use-after-free vulnerability that can lead to local privilege escalation for an authenticated/authorized attacker. Public sources in the connected set confirm the issue and point to a patch via Microsoft security updates (e.g., MSRC ...

EUVD-2026-44244

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-56183

CVE-2026-56183 is a use-after-free vulnerability in the Windows MIDI Service Module that permits a locally authenticated attacker to achieve elevation of privileges. Affected component: Windows MIDI Service Module (CVE-2026-56183) with local attack vector and high impact (CVE described as Elevati...

CVE-2026-56183 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

EUVD-2026-44241

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-56183 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

CVE-2026-50342

The CVE-2026-50342 entry describes an improper access control flaw in the Windows MIDI Service Module that enables a locally authenticated attacker to elevate privileges. The CVSS3.1 base score is 8.8 (High) with Local attack vector, Low attack complexity, Low privileges required, and No user int...

CVE-2026-50342

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

PT-2026-58604

Name of the Vulnerable Software and Affected Versions Windows MIDI Service Module affected versions not specified Description A use-after-free condition in the Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-58601

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A use after free issue in the Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...