SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-69440

HIGH · CVSS 7 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A time-of-check time-of-use (TOCTOU) race condition in the Windows MIDI Service Module allows authorized attackers to exploit this vulnerability to elevate their privileges locally. This could enable them to execute arbitrary code with higher permissions, potentially compromising system integrity. Organizations using affected Windows systems should prioritize addressing this vulnerability to mitigate risks associated with unauthorized privilege escalation.

CVE
CVE-2026-69440
Severity
HIGH
CVSS
7
EPSS
0.21%
Windows

Original NVD Description

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.