CVE Catalog

CVE-2026-78464

HighCVSS 7.0
Published: Updated: Translated: NVD NIST

Summary

Time-of-check time-of-use (TOCTOU) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Risk Assessment

An authorized user could exploit the race condition to elevate privileges, potentially leading to full system control.

Recommendation

Install the latest security updates for Windows.

Other vulnerabilities in Windows MIDI Service

See all
Original NVD description (English source)

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS