PT-2026-87356

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-87658

Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

PT-2026-87728

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-87663

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-87667

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

PT-2026-87475

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-87495

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...

PT-2026-87575

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-79376

An issue in the l2caphandledata function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

CVE-2026-79379

A buffer overflow in the SBC_DecodeFrames() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware allows an attacker to cause a Denial of Service by sending a crafted frame. The vulnerability affects firmware v3.x and earlier and is fixed in v.5.0 . CISA's SSVC assessment rates exp...

CVE-2026-79377

A heap overflow vulnerability exists in the a2dp_decoder_sbc.cpp component of the Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware (v3.x and earlier). An attacker can trigger a Denial of Service (DoS) by sending a crafted L2CAP packet . No specific remediation or exploit details are provi...

PT-2026-87075

A buffer overflow in the SBC DecodeFrames function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service DoS via sending a crafted frame...

PT-2026-87552

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-79376

The Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC is vulnerable to a Denial of Service (DoS) attack due to an issue in the l2cap_handle_data() function. This flaw exists in firmware v3.x and earlier and can be triggered by an attacker sending a crafted L2CAP packet . Exploitation details or spe...

PT-2026-87606

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-20514

In Audio HAL, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087632; Issue ID: MSV-8244...

CVE-2026-20513

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245...

CVE-2026-20512

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

CVE-2026-20507

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9125...

CVE-2026-20506

In Audio HAL, there is a possible escalation of privilege due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11191981; Issue ID: MSV-9126...