CVE-2026-97799
Improper verification of cryptographic signature in Windows Audio Service allows an authorized…
- Risk score
- 51/100
- CVSS
- 7.8 v3.1
- Exploit chance (30 days)
- 0.3%
- Published
- 13 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
- Affected
- Microsoft Windows 11 24h2
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Story map
At a glance
Microsoft Windows 11 24h2: Amber, patch this week. Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.
The flaws
- CVE-2026-97799: Improper verification of cryptographic signature in Windows Audio Service allows an authorized… (CVSS 7.8 · EPSS 0%)
- CVE-2026-69923: Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges… (CVSS 7.8 · EPSS 0%)
- CVE-2026-85836: Use-after-free (CVSS 7.8 · EPSS 0%)
- CVE-2026-85837: Out-of-bounds read (CVSS 7.8 · EPSS 0%)
The fix
Fix: Apply the vendor's security update; see the linked advisory.
Who is exposed: Microsoft Windows 11 24h2
Where it stands
- No known exploitation
Connects to
- Same weakness: CWE-347 (CWE-347). 68 other warnings in 30 days
- Same product: Earlier Microsoft Windows 11 24h2 warnings. 17 in the last 90 days
Why it is Yellow
- CVSS 7.8 high
References
Original description
Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.
Last activity 13 Oct 2026. Patch Forecast updates every hour.