CVE-2026-50440

HighCVSS 7.0/10Last modified Jul 23, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jul 14, 2026
Last modified
Jul 23, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-504417.8Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.CVE-2026-504425.5Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information loCVE-2026-504448.8Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a netCVE-2026-504457.5Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.CVE-2026-504479.8Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.CVE-2026-504487.8Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.CVE-2026-504497.0Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.CVE-2026-50458.8A vulnerability was detected in Tenda FH1201 1.2.0.14(408). This impacts the function WrlclientSet of the file /goform/WrlclientSet of the cCVE-2026-504507.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service alCVE-2026-504517.8Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate prCVE-2026-504528.1Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attackCVE-2026-504534.6Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical
CVE-2026-50440: High severity, CVSS 7.0 | Vulnix