CVE-2026-78464

A time-of-check time-of-use (TOCTOU) race condition in the Windows MIDI Service Module allows authorized attackers to exploit this vulnerability to elevate their privileges locally. This could enable them to execute arbitrary code with elevated permissions, potentially compromising system integrity. Organizations using affected Windows systems should prioritize patching this vulnerability to mitigate the risk of local privilege escalation attacks.