Windows MIDI Service Module vulnerabilities
7 known CVE vulnerabilities in Windows MIDI Service Module, translated and rated.
- CVE-2026-69720High
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
- CVE-2026-69508High
Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
- CVE-2026-69440High
Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
- CVE-2026-68842Medium
A vulnerability in the Windows MIDI Service Module involves exposure of sensitive system information to an unauthorized control sphere. An authorized attacker could exploit this to disclose information locally.
- CVE-2026-62693High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
- CVE-2026-62688High
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
- CVE-2026-50342High
Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

