Windows Speech Brokered API EUVD-2026-22526

Apply Microsoft's April 2026 security updates immediately to patch the vulnerability. Fixed versions include: Windows 10 1607 build 10.0.14393.9060 or later, Windows 10 1809 build 10.0.17763.8644 or later, Windows 10 21H2 build 10.0.19044.7184 or later, Windows 10 22H2 build 10.0.19045.7184 or later, Windows 11 22H3/23H2 build 10.0.22631.6936 or later, Windows 11 24H2 and Server 2025 build 10.0.26100.32690 or later, Windows 11 25H2 build 10.0.26200.8246 or later, Windows 11 26H1 build 10.0.28000.1836 or later, Windows Server 2016 build 10.0.14393.9060 or later, Windows Server 2019 build 10.0.17763.8644 or later, Windows Server 2022 build 10.0.20348.5020 or later, and Server 2022 23H2 build 10.0.25398.2274 or later. Organizations can deploy patches through Windows Update, WSUS, Configuration Manager, or Microsoft Update Catalog. No effective workaround exists that eliminates the vulnerability without patching, as disabling Windows Speech Recognition services would break accessibility features and voice-enabled applications critical to many users. Compensating controls include restricting local administrator access and limiting membership in privileged groups to reduce the pool of authenticated users who could exploit this vulnerability, though these measures do not prevent exploitation by standard authenticated users. Monitor for unusual process creation from speech service executables or unexpected privilege token modifications associated with speech API interactions, though these detection strategies may generate false positives and should not replace timely patching. System reboots are required to complete patch installation for this kernel-level component.