231 matches found
CVE-2026-97799
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96314
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally...
CVE-2026-83644
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83571
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally...
CVE-2026-70230
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70140
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70118
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69977
Use after free in Quality Windows Audio/Video Experience QWAVE service allows an authorized attacker to elevate privileges locally...
EUVD-2026-100401
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-97799
The Windows Audio Service is vulnerable to a Local Privilege Escalation flaw due to improper verification of cryptographic signatures (CWE-347). An authorized attacker can exploit this weakness to elevate privileges locally. A high-severity OFFICIAL_FIX is available. No specific exploit details o...
CVE-2026-70230
A Use after free vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as CWE-416 and has a CVSS 3.1 base score of 7.0 (High) . While the root cause is identified as a use after free, sp...
CVE-2026-96314
An out-of-bounds read vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to perform a local information disclosure, potentially exposing sensitive data. The vulnerability is assigned CWE-125 . No specific exploit details or in-the-wild exploitation informa...
CVE-2026-69977
A Use after free vulnerability exists in the Quality Windows Audio/Video Experience (QWAVE) service. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . No specific exploit code or in-the-wild exploitation details are pr...
CVE-2026-83644
A Use after free vulnerability in the Windows Audio Service allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the service's ability to manage memory safely, potentially allowing a low-privileged user to gain higher system privileges. Remediation is av...
CVE-2026-83571
A null pointer dereference vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low complexity requiring low privileges. Exploitation detai...
CVE-2026-70140
A Use after free vulnerability exists in the Windows Audio Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability's base score is 7.0, categorized as HIGH severity, with impacts on confidentiality, integrity, and availability. Technical detail...
CVE-2026-70118
A Use after free vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the specific technical root cause is not detailed in the provided documents, the vulnerability is confirmed by Microsoft and carries a CVSS 3....
Windows Audio Service Information Disclosure Vulnerability
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally...