CVE-2026-49302: Exposure of Sensitive Information to an Unauthorized Actor

Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-62693: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-62688: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-56187

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-50342

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

EUVD-2026-44244

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-56187 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

CVE-2026-56183 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

EUVD-2026-44241

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-56183 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

CVE-2026-50342 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

CVE-2026-50342 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-56187: Use After Free

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-56183: Use After Free

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-50342: Improper Access Control

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

PT-2026-58601

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A use after free issue in the Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

Malicious Package

Overview epm-service-module-v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-5851 Malicious code in epm-service-module-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd918cea189b1bc56c3747261e190b331708c8dc3e799d144e95c33c0ebe3c0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...