CVE-2026-34328Important

Windows Audio Service Information Disclosure Vulnerability

Assessment

Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally.

Severity: Important
CVSS base score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Impact: Information Disclosure
EPSS, next 30 days: 0.5%Higher than 38.8% of scored CVEs · FIRST model run 26 Sep 2026 · about EPSS
Exploitability: Exploitation Unlikely
Publicly disclosed: No
Customer action: Required: apply the update
Component: Windows Audio Service
Weakness: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Issued by: Microsoft
Published: 14 Jul 2026 · July 2026
Last revised: 14 Jul 2026

7 KBs

KB	Type	Restart	Applies to	Other CVEs
KB5099414	Security Update	Required	Windows 11 Version 23H2 for ARM64-based Systems, Windows 11 Version 23H2 for x64-based Systems	All CVEs in KB5099414
KB5099536	Security Update	Required	Windows Server 2025, Windows Server 2025 (Server Core installation)	All CVEs in KB5099536
KB5099538	Security Update	Required	Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more	All CVEs in KB5099538
KB5099539	Security Update	Required	Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more	All CVEs in KB5099539
KB5099540	Security Update	Required	Windows Server 2022	All CVEs in KB5099540
KB5101649	Security Update	Required	Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems	All CVEs in KB5101649
KB5101650	Security Update	Required	Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more	All CVEs in KB5101650

ESU, Windows

21 affected products