CVE-2026-69801: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70562: Double Free

Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69447: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69311: Use After Free

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69692: Use After Free

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-87606

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description A heap-based buffer overflow in the Windows Audio Service allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes...

PT-2026-87552

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description A use-after-free condition in the Windows Audio Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when...

CVE-2026-69540: Use After Free

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68580

FreeRDP contains an integer overflow in the audio input redirection channel (audin) for versions before 3.29.0, affecting ALSA, sndio, WinMM, and OpenSL ES backends. A malicious FramesPerPacket value from the RDP server can cause allocation size wraparound, leading to a heap-based buffer overflow...

The vulnerability of the Windows Audio service on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Audio service on Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

EUVD-2026-43870

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Audio Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-43998

Use after free in Quality Windows Audio/Video Experience QWAVE service allows an authorized attacker to elevate privileges locally...

EUVD-2026-43829

Improper access control in Windows Audio Compression Manager ACM allows an authorized attacker to elevate privileges locally...

EUVD-2026-43784

Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally...

CVE-2026-50351

Improper access control in Windows Audio Compression Manager ACM allows an authorized attacker to elevate privileges locally...

CVE-2026-34328

Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally...

CVE-2026-50440 Windows Audio Service Elevation of Privilege Vulnerability

...

CVE-2026-34328

CVE-2026-34328 describes an information-disclosure issue in Windows Audio Service, allowing a local attacker with low privileges to disclose sensitive information. Affected: Windows Audio Service (Windows). Root cause details are not provided beyond the high-level description. CVSS v3.1 base scor...

CVE-2026-34328 Windows Audio Service Information Disclosure Vulnerability

...

CVE-2026-54989

CVE-2026-54989 is a use-after-free in the Quality Windows Audio/Video Experience (QWAVE) service that enables a locally authenticated attacker to elevate privileges. The CVSS 3.1 metrics describe a Local attack with High impact on confidentiality, integrity, and availability, requiring LOW privil...