3187 matches found
CVE-2026-20931 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-20931
CVE-2026-20931 is a Windows Telephony Service elevation-of-privilege vulnerability described as external control of a file name or path. The connected sources confirm the affected component as Windows Telephony Service and the issue enables an attacker on an adjacent network to obtain increased p...
CVE-2026-20931 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-20931
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network...
Windows Telephony Service Elevation of Privilege Vulnerability
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network...
CVE-2026-20931: External Control of File Name or Path
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network...
PT-2026-2734
Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description An elevation-of-privilege issue exists in the Windows Telephony Service due to improper external control of file names or paths. Successful exploitation may allow an...
Microsoft Windows Telephony Server 安全漏洞
Microsoft Windows Telephony Server is a component of Microsoft Corporation USA that supports the Telephony Application Programming Interface TAPI, which allows computer programs to communicate with shared telephony services. A security vulnerability exists in Microsoft Windows Telephony Server. A...
The vulnerability of the Windows Operating System’s Telephony Service allows attackers to exploit their privileges.
The vulnerability of the Windows Operating System’s Telephony Service is related to improper external management of file names or file paths. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
CVE-2022-33687
Exposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows local attackers to access IMSI via log...
CVE-2022-26471
In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07319121; Issue ID: ALPS07319121...
CVE-2019-2942
Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...
CVE-2019-2663
Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated...
CVE-2022-33696
Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log...
CVE-2024-34617
Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default Message application...
CVE-2021-2361
Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: SDK client integration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
The vulnerability in the web interface for managing IP-telephony systems FreePBX allows a perpetrator to execute arbitrary code.
The vulnerability of the FreePBX IP-telephony system’s web management interface is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability in the web interface for managing IP-telephony systems FreePBX allows a perpetrator to execute arbitrary code.
The vulnerability in the FreePBX IP-telephony system management web interface is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
The vulnerability of the Endpoint Manager web interface for managing IP telephony systems, FreePBX, allows a intruder to gain unauthorized access to the system.
The vulnerability of the Endpoint Manager web interface for managing IP telephony systems like FreePBX is related to authentication mechanisms’ deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the system remotely...
