CVE-2026-54989
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A use-after-free vulnerability exists in the Quality Windows Audio/Video Experience (QWAVE) service. An authorized attacker can exploit this to elevate privileges locally.
Risk Assessment
An attacker with limited privileges can gain higher privileges, potentially leading to full system compromise.
Recommendation
Install the latest Windows security updates that include a fix for this vulnerability.
Other vulnerabilities in Windows Operating Systems
See all- CVE-2026-50335High
Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally.
- CVE-2026-50317High
A race condition vulnerability exists in Windows Operating Systems during concurrent execution using a shared resource. An authorized attacker can exploit this to elevate privileges locally.
Original NVD description (English source)
Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.