Microsoft Windows Speech Integer Overflow Vulnerability Leading to Privilege Escalation

A vulnerability allowing privilege escalation has been identified in Microsoft Windows Speech. This issue arises from an integer overflow or wraparound, which can be exploited by an authorized attacker to gain elevated privileges locally. The vulnerability affects multiple versions of Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5066835, KB5066836, KB5066791, KB5066793, and KB5066780.