CVE-2026-50440

HighCVSS 7.8

Published: 14/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

A race condition vulnerability in the Windows Audio Service allows an authorized attacker to escalate privileges locally. Improper synchronization during concurrent resource access can be exploited to elevate privileges.

Risk Assessment

The organization risks that an authorized user gains higher privileges, potentially leading to unauthorized access to sensitive data or the system.

Recommendation

Install the latest security updates from Microsoft for Windows that address this vulnerability.

Other vulnerabilities in Windows Audio Service

CVE-2026-34328Medium
A vulnerability in Windows Audio Service allows an authorized attacker to disclose sensitive information locally. The issue stems from improper access control to data.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.