Critical CVSS 7.8 EPSS 0.03524 2019-06 archive

Executive Summary

A remote code execution vulnerability exists when the Microsoft Speech API (SAPI) improperly handles text-to-speech (TTS) input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an attacker would need to convince a user to open a specially crafted document containing TTS content invoked through a scripting language. The update address the vulnerability by modifying how the system handles objects in memory.

Overview

7.8
CVSS HIGH
Critical
MS Severity
Not Exploited
MS Exploit Status
N/A
MS Exploit Likelihood
Category Remote Code Execution
Released Jun 11 2019
Last Updated Jun 11 2019
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.03524 — 0.88015 percentile
NVD CVSS 7.8 HIGH — matches MSRC

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
ATTACK VECTOR
Local
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
Required
SCOPE
Unchanged
CONFIDENTIALITY
High
INTEGRITY
High
AVAILABILITY
High
EXPLOIT CODE MATURITY
Proof-of-Concept
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 7.0

EPSS Score

0.03524
probability of exploitation in the next 30 days
0.88015 percentile - updated 2026-07-25
View on FIRST.org

Known Exploits

Acknowledgments

Ke Liu of Tencent Security Xuanwu Lab