CVE-2026-34328

MediumCVSS 5.5

Published: 14/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

28th percentile - higher than 28% of all known CVEs

Summary

A vulnerability in Windows Audio Service allows an authorized attacker to disclose sensitive information locally. The issue stems from improper access control to data.

Risk Assessment

The organization is at risk of leaking confidential data stored locally, which may lead to security policy violations.

Recommendation

It is recommended to immediately apply the security update provided by the vendor for Windows.

Other vulnerabilities in Windows Audio Service

CVE-2026-50440High
A race condition vulnerability in the Windows Audio Service allows an authorized attacker to escalate privileges locally. Improper synchronization during concurrent resource access can be exploited to elevate privileges.

Original NVD description (English source)

Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally.