CVE-2026-69444
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the vulnerability to execute code with elevated privileges, compromising system security.
Recommendation
Install the latest security patches for Windows.
Other vulnerabilities in Microsoft Windows Speech
See all- CVE-2026-69531Medium
Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.
- CVE-2026-69456High
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
- CVE-2026-49171High
In Microsoft Windows Speech, a use-after-free vulnerability allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS