Executive brief
A race condition in the Windows MIDI Service Module allows a user with basic system access to escalate their privileges to a higher level of system control. An attacker exploiting this vulnerability could gain elevated permissions to modify system settings, install malware, or access sensitive data that should be restricted to administrators.
Technical details
A time-of-check time-of-use (TOCTOU) race condition exists in the Windows MIDI Service Module that permits privilege escalation when an authenticated local attacker can race a security check against a subsequent privileged operation. The vulnerability requires local access and the ability to win a timing race, but allows an authorized user to gain elevated system privileges.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed