CVE Catalog

CVE-2026-70140

HighCVSS 7.0
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.27%

18th percentile - higher than 18% of all known CVEs

Summary

Use after free in Windows Audio Service. An authorized attacker can exploit this to elevate privileges locally.

Risk Assessment

An attacker with local access could elevate privileges, creating a risk of device takeover.

Recommendation

Install the Windows security updates immediately and restrict local access to trusted users.

Other vulnerabilities in Windows Audio Service

See all
Original NVD description (English source)

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS