CVE-2026-23762
Description
VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively), as well as VB-Audio Matrix and Matrix Coconut (versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively), contain a vulnerability in their virtual audio drivers (vbvoicemeetervaio64*.sys, vbmatrixvaio64*.sys, vbaudio_vmauxvaio*.sys, vbaudio_vmvaio*.sys, and vbaudio_vmvaio3*.sys). The drivers map non-paged pool memory into user space via MmMapLockedPagesSpecifyCache using UserMode access without proper exception handling. If the mapping fails, such as when a process has exhausted available virtual address space, MmMapLockedPagesSpecifyCache raises an exception that is not caught, causing a kernel crash (BSoD), typically SYSTEM_SERVICE_EXCEPTION with STATUS_NO_MEMORY. This flaw allows a local unprivileged user to trigger a denial-of-service on affected Windows systems.
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| VB-Audio Software Voicemeeter (Standard) | v ≤ 1.1.1.9 | — |
| VB-Audio Software Voicemeeter Banana | v ≤ 2.1.1.9 | — |
| VB-Audio Software Voicemeeter Potato | v ≤ 3.1.1.9 | — |
| VB-Audio Software Matrix | v ≤ 1.0.2.2 | — |
| VB-Audio Software Matrix Coconut | v ≤ 2.0.2.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.