Windows Audio Service
by Microsoft
CVEs (29)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-69540 | Hig | 0.46 | 7.0 | 0.00 | Sep 8, 2026 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69394 | Hig | 0.46 | 7.0 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69311 | Hig | 0.46 | 7.0 | 0.00 | Sep 8, 2026 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-96314 | Med | 0.36 | 5.5 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. | ||
| CVE-2026-83571 | Med | 0.36 | 5.5 | 0.00 | Oct 13, 2026 | Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally. | ||
| CVE-2018-8454 | Med | 0.36 | 5.5 | 0.03 | Nov 14, 2018 | An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, aka "Windows Audio Service Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. | ||
| CVE-2014-6322 | 0.01 | — | 0.13 | Nov 11, 2014 | The Windows Audio service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via a crafted web site, as demonstrated by… | |||
| CVE-2026-50440 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-34328 | Med | 0.00 | 5.5 | 0.00 | Jul 14, 2026 | Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally. |
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- risk 0.46cvss 7.0epss 0.00
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.00
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.03
An information disclosure vulnerability exists when Windows Audio Service fails to properly handle objects in memory, aka "Windows Audio Service Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019.
- CVE-2014-6322Nov 11, 2014risk 0.01cvss —epss 0.13
The Windows Audio service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via a crafted web site, as demonstrated by…
- risk 0.00cvss 7.8epss 0.00
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- risk 0.00cvss 5.5epss 0.00
Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally.
Page 2 of 2