Executive brief
Windows MIDI Service Module is a core Windows component that handles MIDI (Musical Instrument Digital Interface) device communication. A race condition vulnerability allows an authorized local user to escalate their privileges to a higher level, potentially gaining administrative access to the system.
Technical details
A time-of-check time-of-use (TOCTOU) race condition exists in the Windows MIDI Service Module. The vulnerability occurs between a permission check and a subsequent file or resource operation, allowing a local authenticated attacker with low privileges to manipulate system state between the check and use to bypass intended restrictions. Exploitation requires local access and valid credentials on the target system. A successful exploit results in privilege escalation to a higher privilege level, potentially SYSTEM. Microsoft has released patches to eliminate the race condition window.
Affected products
- Microsoft Windows MIDI Service Module
Timeline
- 2026-09-08: disclosed