CVE-2026-83828: Windows MIDI Service Module Elevation of Privileges Vulnerability
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Other sources
Windows MIDI Service Module Elevation of Privileges Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26300.9711Patch KB5127648 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9711Patch KB5127648 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.3231Patch KB5127646 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9711Patch KB5127648
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An attacker must already be authorized on the affected Windows 11 system and have local access. The vulnerability is therefore primarily relevant where untrusted or lower-privileged users can log on or execute code locally.
What level of access can exploitation provide?
Successful exploitation can allow elevation of privileges, with high potential impact to confidentiality, integrity, and availability. No user interaction is required according to the supplied vector.
How can I determine whether a system is affected?
The provided data identifies Microsoft Windows 11 as affected and the vulnerable component as the Windows MIDI Service Module. It does not provide affected build numbers, update identifiers, or a detection method.