Just a day old and unravelling already, Microsoft quote:

“Microsoft said the exploit was "technically possible" but there was no need to worry.
The firm has pointed out that in order for the flaw to be exploited the speech recognition feature would need to be activated and configured and both microphone and speakers would have to be switched on.”

Yeah - because nobody ever has their speakers or mic switched on, well apart from anyone with a laptop - which has these all built in anyways - or anyone using voip or messenger apps.