Lucene search
+L

17 matches found

NVD
NVD
•added 2026/09/08 6:19 p.m.•11 views

CVE-2026-69531

Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...

5.5CVSS0.00302EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/08 5:11 p.m.•8 views

EUVD-2026-72995

Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00302EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/08 5:11 p.m.•44 views

CVE-2026-69531

CVE-2026-69531 is a confused deputy vulnerability in Microsoft Windows Speech . An authorized attacker with low privileges can exploit an unintended proxy or intermediary relationship to perform local tampering (high integrity impact, no confidentiality or availability impact). The CVSS 3.1 base ...

5.5CVSS5.6AI score0.00302EPSS
SaveExploits0References1Affected Software12
Microsoft CVE
Microsoft CVE
•added 2026/09/08 2:00 p.m.•10 views

Microsoft Windows Speech Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00333EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•1 views

CVE-2026-69444: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•2 views

CVE-2026-69531: Unintended Proxy or Intermediary

Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...

5.5CVSS5.6AI score0.00302EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•13 views

PT-2026-87545

Unintended proxy or intermediary 'confused deputy' in Microsoft Windows Speech allows an authorized attacker to perform tampering locally...

5.5CVSS5.7AI score0.00302EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•3 views

CVE-2026-69456: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00333EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/14 6:32 p.m.•18 views

EUVD-2026-43983

Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

7.5CVSS6AI score0.003EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•1 views

CVE-2026-49171: Use After Free

Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.003EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/14 6:30 p.m.•38 views

EUVD-2026-22538

Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00256EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/14 12:00 a.m.•8 views

PT-2026-32823

🪟 CVE-2026-32153 is “Speech Runtime” but the real threat is Windows’ EoP roulette. When Microsoft says confidence = high, you patch before your users say “hello” to SYSTEM. https://t.co/uMdtsmG92G SpeechRuntime LocalPrivilegeEscalation SecurityUpdateGuide WindowsCve...

7.8CVSS6.2AI score0.00256EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•0 views

CVE-2026-32153: Use After Free

Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

7.8CVSS6.1AI score0.00256EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/14 6:30 p.m.•15 views

EUVD-2025-34407

Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

8.8CVSS6.6AI score0.00395EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•0 views

CVE-2025-58716: Improper Input Validation

Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

8.8CVSS5.7AI score0.00395EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•0 views

CVE-2025-58715: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

8.8CVSS5.7AI score0.00395EPSS
SaveExploits0References1
Exploit DB
Exploit DB
•added 2018/07/23 12:00 a.m.•64 views

Microsoft Windows Speech Recognition - Buffer Overflow (PoC)

Title: Windows Speech Recognition- Buffer Overflow Author: Nassim Asrir Contact: [email protected] | https://www.linkedin.com/in/nassim-asrir-b73a57122/ Vendor: https://www.microsoft.com/ About Windows Speech Recognition: ================================= Windows Speech Recognition lets you...

5.3AI score
SaveExploits0
Rows per page
Query Builder