---
id: "CVE-2026-105574"
page: "https://infrastack.ai/live/CVE-2026-105574"
kind: "vulnerability"
aliases: ["CVE-2026-105574"]
title: "Windows MIDI Service: use-after-free lets a local user gain higher privileges"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "local", "midi", "privilege-escalation", "windows"]
not_affected_if: ["no-local-access"]
published_at: "2026-11-10T19:17:59+00:00"
first_seen_at: "2026-11-10T19:24:20+00:00"
updated_at: "2026-11-11T00:54:49+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105574", "first_seen_at": "2026-11-10T19:24:20+00:00"}, {"source": "analyst", "url": "https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-105574", "first_seen_at": "2026-11-11T00:54:49+00:00", "cites": ["https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-105574"]}]
exploit_sources: []
---

# Windows MIDI Service: use-after-free lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-105574 (this .md is for agents)

Microsoft rates this use-after-free in the Windows MIDI Service Module Important (CVSS 7.0). A local attacker with a low-privilege account who wins a race condition can gain SYSTEM. Microsoft says it is not exploited and not publicly disclosed, and rates exploitation less likely. Affected builds and the update (KB) are not stated in the pages I could read.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Microsoft's page lists no builds or KB yet. Check in Windows Update or the MSRC Update Guide entry for CVE-2026-105574 whether the November 2026 cumulative update is installed on your Windows machines. Priority: shared or multi-user hosts, terminal servers, and developer or audio workstations using the MIDI Service.

## Timeline

- 2026-11-10T19:24:20+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105574
- 2026-11-11T00:54:49+00:00 analyst https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-105574 — MSRC (Nov 2026 release, via sug API) confirms: Important, CVSS 7.0, local, needs winning a race condition, gains SYSTEM, not exploited, not publicly disclosed, Exploitation Less Likely. API gives no KB or build list; patched update unknown. MSRC page JS-only; X/search not tried. Nothing marked verified.

## Documents

- [advisory] MSRC: Windows MIDI Service Module Elevation of Privilege Vulnerability (CVE-2026-105574) https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-105574

## From the sources

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_