CVE-2026-23761: falha de média gravidade em VB-Audio Software Matrix
VB-Audio Voicemeeter & Matrix Drivers DoS via Improper FILE_OBJECT FsContext Initialization
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.2%
VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively), as well as VB-Audio Matrix and Matrix Coconut (versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively), contain a vulnerability in their virtual audio drivers (vbvoicemeetervaio64*.sys, vbmatrixvaio64*.sys, vbaudio_vmauxvaio*.sys, vbaudio_vmvaio*.sys, and vbaudio_vmvaio3*.sys). When a handle is opened with a special file attribute value, the drivers improperly initialize FILE_OBJECT->FsContext to a non-pointer magic value. If subsequent operations are not handled by the VB-Audio driver and are forwarded down the audio driver stack (e.g., via PortCls to ks.sys), the invalid FsContext value can be dereferenced, causing a kernel crash (BSoD), typically SYSTEM_SERVICE_EXCEPTION with STATUS_ACCESS_VIOLATION. This flaw allows a local unprivileged user to trigger a denial-of-service on affected Windows systems.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
VB-Audio Software · MatrixVB-Audio Software · Matrix CoconutVB-Audio Software · Voicemeeter BananaVB-Audio Software · Voicemeeter PotatoVB-Audio Software · Voicemeeter (Standard)CVEs relacionadas — VB-Audio Software Matrix
No mesmo produto, das mais perigosas para as menos.
CVE-2026-23762MEDIUMVB-Audio Voicemeeter & Matrix Drivers DoS via MmMapLockedPagesSpecifyCacheEPSS 0.2%CVE-2026-23763HIGHVB-Audio Matrix Drivers Local Privilege Escalation via Kernel Memory ExposureEPSS 0.2%CVE-2026-23764MEDIUMVB-Audio Voicemeeter & Matrix Drivers DoS via Corrupted IoAllocateMdl LengthEPSS 0.2%
Referências
https://forum.vb-audio.com/viewtopic.php?p=7527#p7527https://forum.vb-audio.com/viewtopic.php?p=7574#p7574https://github.com/emkaix/security-research/tree/main/CVE-2026-23761https://vb-audio.com/https://www.vulncheck.com/advisories/vb-audio-voicemeeter-and-matrix-drivers-dos-via-improper-file-object-fscontext-initialization