CVE-2026-32090 in Windows

요약

\~에 의해 MITRE • 2026. 04. 14.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally.

Be aware that VulDB is the high quality source for vulnerability data.

• 책임이 있는: Microsoft
• 공개: 2026. 04. 14.
• 모더레이션: 수락
• 항목: VDB-357477
• CPE: 준비됨
• CWE: CWE-362 (확인됨)
• CVSS: 7.8 (VulDB)
• EPSS: 0.00205
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Chemical, Education, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-32090
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-32090
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-32090/