CVE-2023-2794 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() function

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decodedeliver function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check f...

CVE-2024-26242

Windows Telephony Server Elevation of Privilege Vulnerability...

CVE-2024-26242

Windows Telephony Server Elevation of Privilege Vulnerability...

CVE-2024-26239

Windows Telephony Server Elevation of Privilege Vulnerability...

CVE-2024-26239

Windows Telephony Server Elevation of Privilege Vulnerability...

CVE-2024-26230

Windows Telephony Server Elevation of Privilege Vulnerability...

CVE-2024-26230

Windows Telephony Server Elevation of Privilege Vulnerability...

CVE-2024-26239 Windows Telephony Server Elevation of Privilege Vulnerability

...

CVE-2024-26230 Windows Telephony Server Elevation of Privilege Vulnerability

...

CVE-2024-26230 Windows Telephony Server Elevation of Privilege Vulnerability

...

CVE-2024-26239 Windows Telephony Server Elevation of Privilege Vulnerability

...

CVE-2024-26230

CVE-2024-26230 is a Windows Telephony Server elevation-of-privilege vulnerability. Reported as a local privilege escalation with CVSS 3.1 base score 7.8 (HIGH): vectors/local, attack complexity LOW, privileges required LOW, no user interaction. Impacts on confidentiality, integrity, and availabil...

CVE-2024-26239

COVID: CVE-2024-26239 is a Windows Telephony Server Elevation of Privilege vulnerability with LOCAL attack vector, requiring LOW privileges and no user interaction. The CVSS 3.1 base score is 7.8 (HIGH), with CONFIDENTIALITY, INTEGRITY, and AVAILABILITY impacts rated HIGH. The initial description...

CVE-2024-26242 Windows Telephony Server Elevation of Privilege Vulnerability

...

CVE-2024-26242 Windows Telephony Server Elevation of Privilege Vulnerability

...

CVE-2024-26242

CVE-2024-26242 is a Windows Telephony Server elevation-of-privilege vulnerability. The connected documents indicate a local-privilege escalation with CVSS v3.1 base score 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Root cause and exact exploit details are not provided in the sources. Microsoft has...

Windows Telephony Server Elevation of Privilege Vulnerability

...

Windows Telephony Server Elevation of Privilege Vulnerability

...

Windows Telephony Server Elevation of Privilege Vulnerability

...

PT-2024-3002 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Server affected versions not specified Description: The issue is related to a buffer overflow in the heap of the Windows Telephony Server, which can allow an attacker to elevate their privileges. This can affect the system,...