{"id":"CVE-2026-119893","kind":"vulnerability","aliases":["CVE-2026-119893"],"related":[],"title":"Windows Audio Service race condition lets a local user gain privileges","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.","summary":"A race condition in the Windows Audio Service lets an attacker who already has local access raise their privileges. The sources do not describe a remote trigger.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Windows Audio Service","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["infrastructure","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:09+00:00","first_seen_at":"2026-11-10T19:25:01+00:00","triaged_at":"2026-11-10T19:51:33+00:00","updated_at":"2026-11-10T19:51:33+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T19:51:33Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Audio Service race condition lets a local user gain privileges","impact":"high","summary":"A race condition in the Windows Audio Service lets an attacker who already has local access raise their privileges. The sources do not describe a remote trigger.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains higher privileges on the Windows machine","analyst_note":"Find the Microsoft Security Response Center advisory for CVE-2026-119893 to confirm affected Windows builds, the fixed update, and how to check exposure.","how_to_check":"- unknown","plain_action":"","product_name":"Windows Audio Service","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Windows machines running the Windows Audio Service are the systems in scope, per the NVD description. The sources do not say which Windows builds are affected or what configuration matters, so unknown.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00066,"input_tokens":4503,"output_tokens":419,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the Microsoft Security Response Center advisory for CVE-2026-119893 to confirm affected Windows builds, the fixed update, and how to check exposure.","search":"'-119893':14A,17A '-2026':13A,16A 'access':38B 'allow':64C 'alreadi':35B 'attack':33B,67C 'audio':2A,19A,29B,62C 'author':66C 'concurr':50C 'condit':5A,25B,59C 'cve':12A,15A 'describ':46B 'elev':69C 'execut':51C 'gain':10A 'improp':56C 'infrastructur':21B 'let':6A,31B 'local':8A,37B,71C 'privileg':11A,41B,70C 'race':4A,24B,58C 'rais':39B 'remot':48B 'resourc':54C 'servic':3A,30B,63C 'service':20A 'share':53C 'sourc':43B 'synchron':57C 'trigger':49B 'use':52C 'user':9A 'window':1A,22B,28B,61C 'windows':18A","nicknames":[],"mitigations":[],"who_affected":"Windows machines running the Windows Audio Service are the systems in scope, per the NVD description. The sources do not say which Windows builds are affected or what configuration matters, so unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":["audioservice","windowsaudioservice"],"ptokens":["audio","service","windows"],"labels":["high","infrastructure","vendor","windows"],"campaign_type":null,"search_a":"'-119893':14A,17A '-2026':13A,16A 'audio':2A,19A 'condit':5A 'cve':12A,15A 'gain':10A 'let':6A 'local':8A 'privileg':11A 'race':4A 'servic':3A 'service':20A 'user':9A 'window':1A 'windows':18A","search_b":"'access':38B 'alreadi':35B 'attack':33B 'audio':29B 'condit':25B 'describ':46B 'infrastructur':21B 'let':31B 'local':37B 'privileg':41B 'race':24B 'rais':39B 'remot':48B 'servic':30B 'sourc':43B 'trigger':49B 'window':22B,28B","search_c":"'allow':64C 'attack':67C 'audio':62C 'author':66C 'concurr':50C 'condit':59C 'elev':69C 'execut':51C 'improp':56C 'local':71C 'privileg':70C 'race':58C 'resourc':54C 'servic':63C 'share':53C 'synchron':57C 'use':52C 'window':61C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:09+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119893","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119893","severity":null,"published_at":"2026-11-10T19:20:09+00:00","modified_at":"2026-11-10T19:20:09+00:00","first_seen_at":"2026-11-10T19:25:01+00:00","fetched_at":"2026-11-10T19:25:01+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}