CVE-2026-69394
HighCVSS 7.0Summary
A heap-based buffer overflow in the Windows Audio Service allows an authorized attacker to elevate privileges locally. The issue stems from improper memory management.
Risk Assessment
An attacker could exploit the buffer overflow to execute code with elevated privileges, potentially leading to system takeover.
Recommendation
Install Windows security updates and restrict access to audio services to trusted users only.
Other vulnerabilities in Windows Audio Service
See all- CVE-2026-70562High
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69801High
A heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69692High
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69604High
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69540High
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69447High
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69311High
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-50440High
A race condition vulnerability in the Windows Audio Service allows an authorized attacker to escalate privileges locally. Improper synchronization during concurrent resource access can be exploited to elevate privileges.
- CVE-2026-34328Medium
A vulnerability in Windows Audio Service allows an authorized attacker to disclose sensitive information locally. The issue stems from improper access control to data.
Original NVD description (English source)
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.