CVE-2026-69531
MediumCVSS 5.5Summary
Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.
Risk Assessment
The attack can lead to unauthorized modifications in speech features, potentially compromising system integrity and trust in services.
Recommendation
Apply security patches and restrict speech service privileges to the minimum necessary.
Other vulnerabilities in Microsoft Windows Speech
See all- CVE-2026-69456High
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
- CVE-2026-69444High
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
- CVE-2026-49171High
In Microsoft Windows Speech, a use-after-free vulnerability allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.