The vulnerability CVE-2026-23762 affects multiple VB-Audio Software products' virtual audio drivers. These drivers map non-paged pool memory into user space with UserMode access but lack proper exception handling for failures in MmMapLockedPagesSpecifyCache. When a process exhausts virtual address space, the mapping call raises an exception that is not caught, resulting in a kernel crash (BSoD) with SYSTEM_SERVICE_EXCEPTION and STATUS_NO_MEMORY. This flaw enables a local attacker without privileges to trigger a denial-of-service condition by causing the system to crash. The CVSS 4.0 base score is 6.9 (medium severity), reflecting local attack vector, low complexity, no privileges required, and high impact on availability. No vendor advisory or patch information is available to confirm remediation status.

A local unprivileged user can cause a denial-of-service by triggering a kernel crash (Blue Screen of Death) on affected Windows systems running vulnerable versions of VB-Audio Software's Voicemeeter and related products. The crash results from unhandled exceptions in the virtual audio drivers when memory mapping fails. This disrupts system availability but does not provide privilege escalation or code execution based on the available data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, affected users should limit local access to trusted users only to reduce the risk of denial-of-service. No official workaround or temporary fix is documented at this time.