CVE-2026-50440Important
Windows Audio Service Elevation of Privilege Vulnerability
Assessment
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- Severity
- Important
- CVSS base score
- 7.8CVSS:3.1/
AV:L/ AC:L/ PR:L/ UI:N/ S:U/ C:H/ I:H/ A:H/ E:U/ RL:O/ RC:C - Impact
- Elevation of Privilege
- EPSS, next 30 days
- 0.2%Higher than 10.5% of scored CVEs · FIRST model run 26 Sep 2026 · about EPSS
- Exploitability
- Exploitation Unlikely
- Publicly disclosed
- No
- Customer action
- Required: apply the update
- Component
- Windows Audio Service
- Weakness
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
- Issued by
- Microsoft
- Published
- 14 Jul 2026 · July 2026
- Last revised
- 14 Jul 2026
Updates that fix it
2 KBs| KB | Type | Restart | Applies to | Other CVEs |
|---|---|---|---|---|
| KB5101649 | Security Update | Required | Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems | All CVEs in KB5101649 |
| KB5101650 | Security Update | Required | Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems and 1 more | All CVEs in KB5101650 |
Affected products
Windows6 affected products
- Windows 11 Version 24H2 for ARM64-based Systems
- Windows 11 Version 24H2 for x64-based Systems
- Windows 11 Version 25H2 for ARM64-based Systems
- Windows 11 Version 25H2 for x64-based Systems
- Windows 11 Version 26H1 for ARM64-based Systems
- Windows 11 version 26H1 for x64-based Systems