Executive brief
Windows Audio Service, which handles sound processing on Windows systems, contains a heap buffer overflow vulnerability that allows an authorized local user to execute arbitrary code and escalate their privileges. An attacker with local system access could exploit this flaw to gain elevated permissions and take full control of the affected computer.
Technical details
The vulnerability is a heap-based buffer overflow in the Windows Audio Service that can be triggered by an authenticated local attacker without any additional user interaction. The flaw allows arbitrary code execution with elevated privileges, giving attackers a path to privilege escalation on the compromised system. A security patch has been released by Microsoft to address this issue.
Affected products
- Microsoft Windows Multiple versions
Timeline
- 2026-09-08: disclosed