EUVD-2026-73079
GHSA-xhcx-5j9h-qgp2
Severity by source
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Local-only vector (AV:L), heap-grooming complexity (AC:H), requires existing low-privileged session (PR:L); full impact upon successful SYSTEM escalation.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
AnalysisAI
Privilege escalation in Windows Audio Service across all current Windows releases exploits a double-free memory corruption condition (CWE-415) to allow a low-privileged local user to gain full system control. The flaw spans Windows 10, 11, and every supported Windows Server generation from 2012 through 2025. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an existing authenticated session on the target Windows machine with at least low-level user privileges (PR:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.0 base score is consistent with a well-understood exploit class - local privilege escalation via memory corruption - that requires meaningful exploitation complexity (AC:H). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft security update that delivers the patched build for each affected Windows version as listed in the EUVD affected-version data (e.g., Windows 11 24H2 to 10.0.26100.9445 or later, Windows Server 2025 to 10.0.26100.33438 or later). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Windows 10, 11, and Windows Server systems to determine exposure scope and prioritize critical systems for patching. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-415 – Double Free
View allShare
External POC / Exploit Code
Leaving vuln.today