CVE-2026-105565: Windows MIDI Service Module Elevation of Privileges Vulnerability
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Other sources
Windows MIDI Service Module Elevation of Privileges Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26300.9974Fixed in 10.0.26300.9911Patch KB5132043 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9974Fixed in 10.0.26200.9911Patch KB5132043 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9974Fixed in 10.0.26100.9911Patch KB5132043 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.3501Patch KB5132059
Event History
Frequently Asked Questions
Which systems are identified as affected?
The affected software listed is Microsoft Windows 11.
What level of access does an attacker need to exploit this issue?
An attacker must already be authorized on the affected system and exploit the issue locally. The provided data does not indicate remote exploitation.
What is the potential impact of successful exploitation?
Successful exploitation can allow elevation of privileges. The supplied vector rates confidentiality, integrity, and availability impact as high.