Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
History

Tue, 14 Oct 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 14 Oct 2025 17:15:00 +0000

Type Values Removed Values Added
Description Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
Title Windows Speech Runtime Elevation of Privilege Vulnerability
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C'}


cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2025-10-14T23:55:18.561Z

Reserved: 2025-09-03T20:46:29.256Z

Link: CVE-2025-58716

cve-icon Vulnrichment

Updated: 2025-10-14T20:35:28.653Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-14T17:15:52.720

Modified: 2025-10-14T19:35:56.913

Link: CVE-2025-58716

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.