CVE-2026-69891
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
Risk Assessment
An authorized user could exploit this flaw to gain higher privileges, potentially leading to system security compromise.
Recommendation
Install security updates and restrict multimedia features to trusted applications.
Other vulnerabilities in Windows Media
See all- CVE-2026-58542High
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
- CVE-2026-50677High
Use-after-free vulnerability in Windows Media allows an authorized attacker to elevate privileges locally.
- CVE-2026-50676High
Race condition vulnerability in Windows Media allows an authorized attacker to elevate privileges locally.
- CVE-2026-50655High
Windows Media contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.
- CVE-2026-50433High
Use-After-Free vulnerability in Windows Media allows an authorized attacker to elevate privileges locally.
- CVE-2026-50415Medium
An exposure of sensitive information to an unauthorized actor exists in Windows Media. An unauthorized attacker can exploit this to disclose information remotely over the network.
- CVE-2026-50414High
A race condition vulnerability in Windows Media allows an authorized attacker to elevate privileges over the network.
- CVE-2026-50404High
A race condition in Windows Media allows an authorized attacker to elevate privileges locally.
- CVE-2026-50398High
Windows Media has a race condition vulnerability due to concurrent execution using a shared resource, allowing an authorized attacker to elevate privileges over a network.
- CVE-2026-50394Medium
A vulnerability in Windows Media allows an authorized attacker to disclose sensitive information locally. The issue stems from improper access control to data.
Original NVD description (English source)
Use after free in Windows Media allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

