CVE-2026-97799: CWE-347: Improper Verification of Cryptographic Signature in Microsoft Windows 11 Version 24H2

This vulnerability (CVE-2026-97799) arises from improper verification of cryptographic signatures within the Windows Audio Service on Windows 11 Version 24H2. An authorized attacker with local access can exploit this flaw to elevate their privileges on the affected system. The CVSS 3.1 base score is 7.8, indicating high severity, with attack vector local, low attack complexity, and no user interaction required. The vulnerability impacts confidentiality, integrity, and availability. Microsoft has published an official fix for this issue.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher-level access than intended. This can compromise system confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for Windows 11 Version 24H2 as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97799. No additional mitigation actions are indicated by the vendor advisory.