CVE Catalog

CVE-2026-62693

HighCVSS 7.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.19%

9th percentile - higher than 9% of all known CVEs

Summary

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker with local access could exploit the race condition to elevate privileges, potentially leading to unpredictable system behavior or takeover.

Recommendation

Apply the latest Windows security updates.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS