← Database

CVE-2026-119904

HIGH CVSS: 7.8 Published: 2026-11-10 Modified: 2026-11-10

Description

Improper control of generation of code ('code injection') in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

Affected Platforms

Unknown

Weakness Type

CWE-94

References