CVE-2018-8634

High · 8.8

CVSS

8.8

EPSS

15.4%

Published

Dec 12, 2018

CISA due date

—

The record

A remote code execution vulnerability exists in Windows where Microsoft text-to-speech fails to properly handle objects in the memory, aka "Microsoft Text-To-Speech Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

Affected packages

Ecosystem	Package	Introduced	Fixed