Vulnerabilities

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Microsoft

Product

Windows 11 Version 24H2, Windows 11 Version 25H2, Windows 11 version 26H1

CVSS v3.1

7.0 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-416

Exposure class

Operating system

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-105574 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 36
   CVE NVD 3h ago

   Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-109473 Microsoft
2. 36
   CVE NVD 3h ago

   Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-108413 Microsoft
3. 36
   CVE NVD 3h ago

   Use after free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-108406 Microsoft
4. 42
   CVE NVD 3h ago

   Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

   CVSS 7.8 CVE-2026-108403 Microsoft
5. 42
   CVE NVD 3h ago

   Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-105589 Microsoft
6. 36
   CVE NVD 3h ago

   Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-105567 Microsoft
7. 36
   CVE NVD 3h ago

   Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-105565 Microsoft
8. 36
   CVE NVD 3h ago

   Use after free in Winlogon allows an authorized attacker to elevate privileges locally.

   CVSS 7.0 CVE-2026-105522 Microsoft
9. 36
   CVE NVD 3h ago

   Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

   CVSS 8.8 CVE-2026-105499 Microsoft
10. 36
    CVE NVD 3h ago

    Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

    CVSS 7.0 CVE-2026-105024 Microsoft
11. 36
    CVE NVD 3h ago

    Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

    CVSS 7.8 CVE-2026-105022 Microsoft