high · CVSS v3 7.8
CVE-2026-20569
CVE-2026-20569 is a use‑after‑free memory corruption in Microsoft Windows ADSP that can lead to local privilege escalation if an attacker al
Overview
CVE-2026-20569 is a use‑after‑free memory corruption in Microsoft Windows ADSP that can lead to local privilege escalation if an attacker already has System privileges. The flaw does not require user interaction and can be triggered by a malicious actor with sufficient access. It is a high‑severity vulnerability with a CVSS v3 score of 7.8.
Description
In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11431474; Issue ID: MSV-9927.
Impact
The vulnerability allows an attacker to corrupt memory and gain elevated privileges, compromising the confidentiality, integrity, and availability of the affected system. Local users with System privileges can exploit the flaw to execute arbitrary code. Defenders must be aware that this can undermine system security and potentially allow further lateral movement.
Remediation
Apply the official patch identified as ALPS11431474 to update the ADSP component. Ensure the system is fully updated with the latest Windows security updates. If ADSP is not required, consider disabling or removing the service to reduce the attack surface.
Risk context
The CVE is rated high severity with a CVSS v3 score of 7.8. No EPSS data is available, but the lack of user interaction and the potential for privilege escalation warrant prompt remediation.
Affected products
- Microsoft Windows ADSP
- Windows Audio Service
- Windows Audio Device Service
Scores
- Severity
- high
- CVSS v2
- 4.6
- CVSS v3
- 7.8
- CVSS v4
- —
- EPSS
- —