CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
AnalysisAI
Use-after-free in Microsoft Windows Speech component enables local privilege escalation to SYSTEM on Windows 10 (versions 1809, 21H2, 22H2) and Windows 11 (versions 22H3 through 26H1). Authenticated local attackers with low privileges can exploit memory corruption to gain full system control with low attack complexity and no user interaction required. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all Windows 10 (versions 1809, 21H2, 22H2) and Windows 11 (versions 22H3-26H1) systems; audit which devices have low-privileged user accounts with local execution rights. Within 7 days: Deploy vendor-released patches to all affected systems through standard patch management channels; prioritize servers and systems with sensitive data access. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today
EUVD-2026-22538