EUVD-2026-72995
GHSA-6m27-j85f-9gpr
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Local access with low privileges required; confused deputy yields integrity-only impact; no confidentiality or availability effect confirmed.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
4DescriptionCVE.org
Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally.
AnalysisAI
Local integrity tampering in the Windows Speech component via a confused deputy (CWE-441) flaw allows an authenticated low-privileged attacker to cause unintended actions on behalf of a higher-privileged process or service, resulting in unauthorized file or system state modification. Affected scope spans Windows 10 (version 1607 through 22H2), Windows 11 (versions 23H2 through 25H2/26H1), and Windows Server 2016 through 2025, making remediation surface broad. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an attacker to have an interactive or programmatic local session on the target Windows system with at minimum a standard (low-privileged) user account - consistent with PR:L in the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS base score of 5.5 (Medium) reflects the local-only attack vector and requirement for low privileges, which substantially limits exposure compared to network-reachable vulnerabilities. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-released cumulative updates that bring each Windows build to or above the fixed build numbers: Windows 10 1607/Server 2016 to 10.0.14393.9512 or later, Windows 10 1809/Server 2019 to 10.0.17763.9245 or later, Windows 10 21H2/22H2 to 10.0.19044/19045.7725 or later, Windows 11 23H2 to 10.0.22631.7582 or later, Windows 11 24H2/Server 2025 to 10.0.26100.9445 (client) or 10.0.26100.33438 (server) or later, Windows 11 25H2 to 10.0.26200.9445 or later, Windows 11 26H1 to 10.0.28000.2954 or later, and Windows Server 2022 to 10.0.20348.5622 or later. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today