Read the docs
TI-2026-21134 Aliases CVE-2026-26142GHSA-7w62-gvgg-pvvq

Nuance PowerScribe Remote Code Execution Vulnerability

Priority MEDIUM 53CWE-502Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from Microsoft.

Summary

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01914 79th percentileScored 2026-11-07
Fix Fixed Nuance PowerScribe 360 4.0 (Microsoft): 7.0.11.49Nuance PowerScribe 360 version 4.0.1 (Microsoft): 7.0.111.68+20 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrosoftNuance PowerScribe 360 4.04.0 to before 7.0.11.497.0.11.49Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.14.0.1 to before 7.0.111.687.0.111.68Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.24.0.2 to before 7.0.154.187.0.154.18Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.34.0.3 to before 7.0.197.107.0.197.10Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.44.0.4 to before 7.0.212.107.0.212.10Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.54.0.5 to before 7.0.243.197.0.243.19Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.64.0.6 to before 7.0.277.287.0.277.28Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.74.0.7 to before 7.0.316.127.0.316.12Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.84.0.8 to before 7.0.427.157.0.427.15Patch availableCNA
MicrosoftNuance PowerScribe 360 version 4.0.94.0.9 to before 7.0.528.247.0.528.24Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.12019.1 to before 2019.1.96.62019.1.96.6Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.102019.10 to before 2019.10.36.142019.10.36.14Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.22019.2 to before 2019.2.9.112019.2.9.11Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.32019.3 to before 2019.3.16.212019.3.16.21Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.42019.4 to before 2019.4.9.172019.4.9.17Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.52019.5 to before 2019.5.14.402019.5.14.40Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.62019.6 to before 2019.6.36.402019.6.36.40Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.72019.7 to before 2019.7.107.262019.7.107.26Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.82019.8 to before 2019.8.43.192019.8.43.19Patch availableCNA
MicrosoftNuance PowerScribe One version 2019.92019.9 to before 2019.9.31.232019.9.31.23Patch availableCNA
MicrosoftPowerScribe One version 2023.1 SP2 Patch 112023.1 to before 2023.2.30542023.2.3054Patch availableCNA
MicrosoftPowerScribe One version 2023.1 SP3 Patch 62023.1 to before 2023.3.90722023.3.9072Patch availableCNA
  • Nuance PowerScribe 360 4.0 VendorMicrosoft Affected 4.0 to before 7.0.11.49 Fixed in 7.0.11.49 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.1 VendorMicrosoft Affected 4.0.1 to before 7.0.111.68 Fixed in 7.0.111.68 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.2 VendorMicrosoft Affected 4.0.2 to before 7.0.154.18 Fixed in 7.0.154.18 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.3 VendorMicrosoft Affected 4.0.3 to before 7.0.197.10 Fixed in 7.0.197.10 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.4 VendorMicrosoft Affected 4.0.4 to before 7.0.212.10 Fixed in 7.0.212.10 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.5 VendorMicrosoft Affected 4.0.5 to before 7.0.243.19 Fixed in 7.0.243.19 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.6 VendorMicrosoft Affected 4.0.6 to before 7.0.277.28 Fixed in 7.0.277.28 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.7 VendorMicrosoft Affected 4.0.7 to before 7.0.316.12 Fixed in 7.0.316.12 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.8 VendorMicrosoft Affected 4.0.8 to before 7.0.427.15 Fixed in 7.0.427.15 Patch available CNA
  • Nuance PowerScribe 360 version 4.0.9 VendorMicrosoft Affected 4.0.9 to before 7.0.528.24 Fixed in 7.0.528.24 Patch available CNA
  • Nuance PowerScribe One version 2019.1 VendorMicrosoft Affected 2019.1 to before 2019.1.96.6 Fixed in 2019.1.96.6 Patch available CNA
  • Nuance PowerScribe One version 2019.10 VendorMicrosoft Affected 2019.10 to before 2019.10.36.14 Fixed in 2019.10.36.14 Patch available CNA
  • Nuance PowerScribe One version 2019.2 VendorMicrosoft Affected 2019.2 to before 2019.2.9.11 Fixed in 2019.2.9.11 Patch available CNA
  • Nuance PowerScribe One version 2019.3 VendorMicrosoft Affected 2019.3 to before 2019.3.16.21 Fixed in 2019.3.16.21 Patch available CNA
  • Nuance PowerScribe One version 2019.4 VendorMicrosoft Affected 2019.4 to before 2019.4.9.17 Fixed in 2019.4.9.17 Patch available CNA
  • Nuance PowerScribe One version 2019.5 VendorMicrosoft Affected 2019.5 to before 2019.5.14.40 Fixed in 2019.5.14.40 Patch available CNA
  • Nuance PowerScribe One version 2019.6 VendorMicrosoft Affected 2019.6 to before 2019.6.36.40 Fixed in 2019.6.36.40 Patch available CNA
  • Nuance PowerScribe One version 2019.7 VendorMicrosoft Affected 2019.7 to before 2019.7.107.26 Fixed in 2019.7.107.26 Patch available CNA
  • Nuance PowerScribe One version 2019.8 VendorMicrosoft Affected 2019.8 to before 2019.8.43.19 Fixed in 2019.8.43.19 Patch available CNA
  • Nuance PowerScribe One version 2019.9 VendorMicrosoft Affected 2019.9 to before 2019.9.31.23 Fixed in 2019.9.31.23 Patch available CNA
  • PowerScribe One version 2023.1 SP2 Patch 11 VendorMicrosoft Affected 2023.1 to before 2023.2.3054 Fixed in 2023.2.3054 Patch available CNA
  • PowerScribe One version 2023.1 SP3 Patch 6 VendorMicrosoft Affected 2023.1 to before 2023.3.9072 Fixed in 2023.3.9072 Patch available CNA

CPE configurations NVD · 22

CPEVersionsRoleVendor
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.0:*:*:*:*:*:*:*4.0.0VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.1:*:*:*:*:*:*:*4.0.1VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.2:*:*:*:*:*:*:*4.0.2VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.3:*:*:*:*:*:*:*4.0.3VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.4:*:*:*:*:*:*:*4.0.4VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.5:*:*:*:*:*:*:*4.0.5VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.6:*:*:*:*:*:*:*4.0.6VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.7:*:*:*:*:*:*:*4.0.7VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.8:*:*:*:*:*:*:*4.0.8VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.9:*:*:*:*:*:*:*4.0.9VulnerableMicrosoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.0:*:*:*:*:*:*:* Versions 4.0.0 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.5:*:*:*:*:*:*:* Versions 4.0.5 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.6:*:*:*:*:*:*:* Versions 4.0.6 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.7:*:*:*:*:*:*:* Versions 4.0.7 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.8:*:*:*:*:*:*:* Versions 4.0.8 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_360:4.0.9:*:*:*:*:*:*:* Versions 4.0.9 Vulnerable ·Microsoft
Show 12 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.1:*:*:*:*:*:*:*2019.1VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.2:*:*:*:*:*:*:*2019.2VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.3:*:*:*:*:*:*:*2019.3VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.4:*:*:*:*:*:*:*2019.4VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.5:*:*:*:*:*:*:*2019.5VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.6:*:*:*:*:*:*:*2019.6VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.7:*:*:*:*:*:*:*2019.7VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.8:*:*:*:*:*:*:*2019.8VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.9:*:*:*:*:*:*:*2019.9VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.10:*:*:*:*:*:*:*2019.10VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2023.1:sp2_patch_11:*:*:*:*:*:*2023.1 sp2_patch_11VulnerableMicrosoft
cpe:2.3:a:microsoft:nuance_powerscribe_one:2023.1:sp3_patch_6:*:*:*:*:*:*2023.1 sp3_patch_6VulnerableMicrosoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.1:*:*:*:*:*:*:* Versions 2019.1 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.2:*:*:*:*:*:*:* Versions 2019.2 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.3:*:*:*:*:*:*:* Versions 2019.3 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.4:*:*:*:*:*:*:* Versions 2019.4 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.5:*:*:*:*:*:*:* Versions 2019.5 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.6:*:*:*:*:*:*:* Versions 2019.6 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.7:*:*:*:*:*:*:* Versions 2019.7 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.8:*:*:*:*:*:*:* Versions 2019.8 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.9:*:*:*:*:*:*:* Versions 2019.9 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2019.10:*:*:*:*:*:*:* Versions 2019.10 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2023.1:sp2_patch_11:*:*:*:*:*:* Versions 2023.1 sp2_patch_11 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:nuance_powerscribe_one:2023.1:sp3_patch_6:*:*:*:*:*:* Versions 2023.1 sp3_patch_6 Vulnerable ·Microsoft

Remediation

  • Fix · CNA Nuance PowerScribe 360 4.0 (Microsoft) Fixed in 7.0.11.49
  • Fix · CNA Nuance PowerScribe 360 version 4.0.1 (Microsoft) Fixed in 7.0.111.68
  • Fix · CNA Nuance PowerScribe 360 version 4.0.2 (Microsoft) Fixed in 7.0.154.18
  • Fix · CNA Nuance PowerScribe 360 version 4.0.3 (Microsoft) Fixed in 7.0.197.10
  • Fix · CNA Nuance PowerScribe 360 version 4.0.4 (Microsoft) Fixed in 7.0.212.10
  • Fix · CNA Nuance PowerScribe 360 version 4.0.5 (Microsoft) Fixed in 7.0.243.19
  • Fix · CNA Nuance PowerScribe 360 version 4.0.6 (Microsoft) Fixed in 7.0.277.28
  • Fix · CNA Nuance PowerScribe 360 version 4.0.7 (Microsoft) Fixed in 7.0.316.12
  • Fix · CNA Nuance PowerScribe 360 version 4.0.8 (Microsoft) Fixed in 7.0.427.15
  • Fix · CNA Nuance PowerScribe 360 version 4.0.9 (Microsoft) Fixed in 7.0.528.24
  • Fix · CNA Nuance PowerScribe One version 2019.1 (Microsoft) Fixed in 2019.1.96.6
  • Fix · CNA Nuance PowerScribe One version 2019.10 (Microsoft) Fixed in 2019.10.36.14
  • Fix · CNA Nuance PowerScribe One version 2019.2 (Microsoft) Fixed in 2019.2.9.11
  • Fix · CNA Nuance PowerScribe One version 2019.3 (Microsoft) Fixed in 2019.3.16.21
  • Fix · CNA Nuance PowerScribe One version 2019.4 (Microsoft) Fixed in 2019.4.9.17
  • Fix · CNA Nuance PowerScribe One version 2019.5 (Microsoft) Fixed in 2019.5.14.40
  • Fix · CNA Nuance PowerScribe One version 2019.6 (Microsoft) Fixed in 2019.6.36.40
  • Fix · CNA Nuance PowerScribe One version 2019.7 (Microsoft) Fixed in 2019.7.107.26
  • Fix · CNA Nuance PowerScribe One version 2019.8 (Microsoft) Fixed in 2019.8.43.19
  • Fix · CNA Nuance PowerScribe One version 2019.9 (Microsoft) Fixed in 2019.9.31.23
  • Fix · CNA PowerScribe One version 2023.1 SP2 Patch 11 (Microsoft) Fixed in 2023.2.3054
  • Fix · CNA PowerScribe One version 2023.1 SP3 Patch 6 (Microsoft) Fixed in 2023.3.9072

Vendor assessments

Microsoft

Microsoft's page for this CVE →

Impact
Remote Code Execution
Exploited
No
Publicly disclosed
No
Exploitability
Exploitation Less Likely
ProductStatusPlan or fix
Nuance PowerScribe 360 4.0Fixed 7.0.11.49 · Security Update
Nuance PowerScribe 360 version 4.0.1Fixed 7.0.111.68 · Security Update
Nuance PowerScribe 360 version 4.0.2Fixed 7.0.154.18 · Security Update
Nuance PowerScribe 360 version 4.0.3Fixed 7.0.197.10 · Security Update
Nuance PowerScribe 360 version 4.0.4Fixed 7.0.212.10 · Security Update
Nuance PowerScribe 360 version 4.0.5Fixed 7.0.243.19 · Security Update
Nuance PowerScribe 360 version 4.0.6Fixed 7.0.277.28 · Security Update
Nuance PowerScribe 360 version 4.0.7Fixed 7.0.316.12 · Security Update
Nuance PowerScribe 360 version 4.0.8Fixed 7.0.427.15 · Security Update
Nuance PowerScribe 360 version 4.0.9Fixed 7.0.528.24 · Security Update
Nuance PowerScribe One version 2019.1Fixed 2019.1.96.6 · Security Update
Nuance PowerScribe One version 2019.10Fixed 2019.10.36.14 · Security Update
Nuance PowerScribe One version 2019.2Fixed 2019.2.9.11 · Security Update
Nuance PowerScribe One version 2019.3Fixed 2019.3.16.21 · Security Update
Nuance PowerScribe One version 2019.4Fixed 2019.4.9.17 · Security Update
Nuance PowerScribe One version 2019.5Fixed 2019.5.14.40 · Security Update
Nuance PowerScribe One version 2019.6Fixed 2019.6.36.40 · Security Update
Nuance PowerScribe One version 2019.7Fixed 2019.7.107.26 · Security Update
Nuance PowerScribe One version 2019.8Fixed 2019.8.43.19 · Security Update
Nuance PowerScribe One version 2019.9Fixed 2019.9.31.23 · Security Update
PowerScribe One version 2023.1 SP2 Patch 11Fixed 2023.2.3054 · Security Update
PowerScribe One version 2023.1 SP3 Patch 6Fixed 2023.3.9072 · Security Update

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-26142
  2. 2026-10-03 Alias added: GHSA-7w62-gvgg-pvvq

References

Patch 1

  • TI-2025-21700 Nuance PowerScribe 360 Information Disclosure Vulnerability CVSS 3.1HIGH 8.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences