CVE-2026-69339
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A vulnerability in the Windows MIDI Service Module allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.
Risk Assessment
The risk involves leakage of confidential system data, which may aid an attacker in further attacks or privilege escalation.
Recommendation
Install the latest Windows security updates. Restrict local access to the system to trusted users only.
Other vulnerabilities in Windows MIDI Service
See all- CVE-2026-78464High
Time-of-check time-of-use (TOCTOU) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
- CVE-2026-56187High
A use-after-free vulnerability in the Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
- CVE-2026-56183High
Use After Free vulnerability in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS