CVE-2026-69440

CVE-2026-69440 is a Time-of-Check Time-of-Use (TOCTOU) race condition in the Windows MIDI Service Module that allows an authorized low-privilege attacker to achieve local privilege escalation . The vulnerability is scored CVSS 3.1: 7.0 (High) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H ,...

CVE-2026-68842

CVE-2026-68842 is an information disclosure vulnerability in the Windows MIDI Service Module , where sensitive system information is exposed to an unauthorized control sphere. An authorized attacker with local access and low privileges can disclose confidential information, with high impact to co...

EUVD-2026-73406

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

CVE-2026-69339

CVE-2026-69339 is an information disclosure vulnerability in the Windows MIDI Service Module . It allows an attacker with low local privileges to expose sensitive system information to an unauthorized control sphere, resulting in high confidentiality impact with no integrity or availability impac...

EUVD-2026-73224

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Windows MIDI Service Module Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Windows MIDI Service Module Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-69440: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

PT-2026-88005

Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

PT-2026-87279

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

CVE-2026-78464: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-68842: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

PT-2026-87679

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-69720: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows MIDI...

CVE-2026-69339: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...