CVE-2026-69604
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could exploit the flaw to escalate privileges and fully compromise the system.
Recommendation
Install Windows security updates.
Other vulnerabilities in Windows Audio Service
See all- CVE-2026-97799High
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-96314Medium
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
- CVE-2026-83644High
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83571Medium
A null pointer dereference vulnerability exists in Windows Audio Service. An authorized attacker can exploit this to disclose information locally.
- CVE-2026-70230High
Use after free vulnerability in the Windows Audio Service. An authorized attacker can exploit it to elevate privileges locally.
- CVE-2026-70140High
Use after free in Windows Audio Service. An authorized attacker can exploit this to elevate privileges locally.
- CVE-2026-70118High
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-70562High
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69801High
A heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69692High
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS