CVE-2026-50440

—

CVSS 3.1

7.0 high

EPSS

<1%p12

Published

Jul 14, 2026 (Jul 14, 2026)

Modified

Jul 23, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Vendors: microsoft
Products: windows 11 24h2, windows 11 25h2, windows 11 26h1
Weakness: CWE-362, CWE-416
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.