CVE-2026-69801
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
A heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker could gain elevated privileges, potentially leading to full system compromise.
Recommendation
Install the latest security updates for Windows.
Other vulnerabilities in Windows Audio Service
See all- CVE-2026-97799High
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-96314Medium
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
- CVE-2026-83644High
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83571Medium
A null pointer dereference vulnerability exists in Windows Audio Service. An authorized attacker can exploit this to disclose information locally.
- CVE-2026-70230High
Use after free vulnerability in the Windows Audio Service. An authorized attacker can exploit it to elevate privileges locally.
- CVE-2026-70140High
Use after free in Windows Audio Service. An authorized attacker can exploit this to elevate privileges locally.
- CVE-2026-70118High
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-70562High
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69692High
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-69604High
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS