CVE-2026-32090: Windows Speech Brokered Api Elevation of Privilege Vulnerability

CVE-2026-32090 is an elevation of privilege vulnerability in Windows Speech Brokered Api, rated Important by Microsoft, with a CVSS 3.1 base score of 7.8 (High). An attacker can exploit it by an attacker with local access, with low privileges and without user interaction. Microsoft has not reported exploitation in the wild and rates exploitation as unlikely. The EPSS model estimates a 0.21% probability of exploitation activity in the next 30 days, higher than 10% of all scored vulnerabilities. Microsoft released the fix on 14 April 2026 in the April 2026 Patch Tuesday, delivered through 9 security updates (KB5083768, KB5082123, KB5082142, KB5082200 and more). It affects 27 products in 2 product families (Windows, ESU).

Key facts

CVE ID: CVE-2026-32090
Severity: High CVSS 7.8
Microsoft severity: Important
Impact: Elevation of Privilege
Exploited in the wild: No
Publicly disclosed: No
Exploitation likelihood: Unlikely
Weakness: CWE-362; CWE-416
EPSS: 0.21% (percentile 10%)
CISA KEV: Not listed
Released: 14 April 2026
Last updated: 14 April 2026
Patch Tuesday: April 2026 Patch Tuesday
Product families: Windows, ESU

CVSS score and vector

Microsoft scores CVE-2026-32090 at 7.8 (temporal 6.8) using CVSS 3.1. Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Metric	Value
Attack vector	Local
Attack complexity	Low
Privileges required	Low
User interaction	None
Scope	Unchanged
Confidentiality impact	High
Integrity impact	High
Availability impact	High
Exploit code maturity	Unproven
Remediation level	Official fix
Report confidence	Confirmed

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally.

Frequently asked questions (Microsoft)

What privileges could be gained by an attacker who successfully exploited the vulnerability?

An attacker who successfully exploited this vulnerability could gain administrator privileges.

Affected products (27)

Windows

Product	Security update	Type	Fixed build	Restart
Windows 11 Version 26H1 for ARM64-based Systems	KB5083768	Security Update	10.0.28000.1836	Yes
Windows 11 version 26H1 for x64-based Systems	KB5083768	Security Update	10.0.28000.1836	Yes
Windows 10 Version 1809 for 32-bit Systems	KB5082123	Security Update	10.0.17763.8644	Yes
Windows 10 Version 1809 for x64-based Systems	KB5082123	Security Update	10.0.17763.8644	Yes
Windows Server 2019	KB5082123	Security Update	10.0.17763.8644	Yes
Windows Server 2019 (Server Core installation)	KB5082123	Security Update	10.0.17763.8644	Yes
Windows Server 2022	KB5082142	Security Update	10.0.20348.5020	Yes
Windows Server 2022 (Server Core installation)	KB5082142	Security Update	10.0.20348.5020	Yes
Windows 10 Version 21H2 for 32-bit Systems	KB5082200	Security Update	10.0.19044.7184	Yes
Windows 10 Version 21H2 for ARM64-based Systems	KB5082200	Security Update	10.0.19044.7184	Yes
Windows 10 Version 21H2 for x64-based Systems	KB5082200	Security Update	10.0.19044.7184	Yes
Windows Server 2025 (Server Core installation)	KB5082063	Security Update	10.0.26100.32690	Yes
Windows 11 Version 25H2 for ARM64-based Systems	KB5083769	Security Update	10.0.26200.8246	Yes
Windows 11 Version 25H2 for x64-based Systems	KB5083769	Security Update	10.0.26200.8246	Yes
Windows 11 Version 23H2 for ARM64-based Systems	KB5082052	Security Update	10.0.22631.6936	Yes
Windows 11 Version 23H2 for x64-based Systems	KB5082052	Security Update	10.0.22631.6936	Yes
Windows Server 2022, 23H2 Edition (Server Core installation)	KB5082060	Security Update	10.0.25398.2274	Yes
Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 24H2 for x64-based Systems
Windows Server 2025	KB5082063	Security Update	10.0.26100.32690	Yes
Windows 10 Version 1607 for 32-bit Systems	KB5082198	Security Update	10.0.14393.9060	Yes
Windows 10 Version 1607 for x64-based Systems	KB5082198	Security Update	10.0.14393.9060	Yes
Windows Server 2016	KB5082198	Security Update	10.0.14393.9060	Yes
Windows Server 2016 (Server Core installation)	KB5082198	Security Update	10.0.14393.9060	Yes

ESU

Product	Security update	Type	Fixed build	Restart
Windows 10 Version 22H2 for x64-based Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for 32-bit Systems

Security updates (9)

KB5083768 (Security Update)
KB5082123 (Security Update)
KB5082142 (Security Update)
KB5082200 (Security Update)
KB5082063 (Security Update)
KB5083769 (Security Update)
KB5082052 (Security Update)
KB5082060 (Security Update)
KB5082198 (Security Update)

NIST NVD data

NVD status: Analyzed
NVD CVSS: 7.8 (HIGH)
NVD weakness: CWE-362; CWE-416
Published to NVD: 14 April 2026
NVD last modified: 21 April 2026

Affected configurations (CPE)

Product	Vulnerable versions
windows 10 1607 (x64)	before 10.0.14393.9060
windows 10 1607 (x86)	before 10.0.14393.9060
windows 10 1809 (x64)	before 10.0.17763.8644
windows 10 1809 (x86)	before 10.0.17763.8644
windows 10 21h2 (arm64)	before 10.0.19044.7184
windows 10 21h2 (x64)	before 10.0.19044.7184
windows 10 21h2 (x86)	before 10.0.19044.7184
windows 10 22h2 (arm64)	before 10.0.19045.7184
windows 10 22h2 (x64)	before 10.0.19045.7184
windows 10 22h2 (x86)	before 10.0.19045.7184
windows 11 23h2 (arm64)	before 10.0.22631.6936
windows 11 23h2 (x64)	before 10.0.22631.6936
windows 11 24h2 (arm64)	before 10.0.26100.8246
windows 11 24h2 (x64)	before 10.0.26100.8246
windows 11 25h2 (arm64)	before 10.0.26200.8246
windows 11 25h2 (x64)	before 10.0.26200.8246
windows 11 26h1 (arm64)	before 10.0.28000.1836
windows 11 26h1 (x64)	before 10.0.28000.1836
windows server 2016	before 10.0.14393.9060
windows server 2019	before 10.0.17763.8644
windows server 2022	before 10.0.20348.5020
windows server 2022 23h2	before 10.0.25398.2274
windows server 2025	before 10.0.26100.32690

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32090 (Vendor Advisory)

Acknowledgments

Anonymous

Revision history

Version	Date	Description
1.0	14 April 2026	Information published.