CVE-2025-21406 Windows Telephony Service Remote Code Execution Vulnerability

...

CVE-2025-21406

CVE-2025-21406 is listed by NCSC as a Windows Telephony Service vulnerability with CVSS 8.80, enabling execution of arbitrary code. No affected product/version details or patch specifics are provided in the connected documents; Microsoft updates are referenced generally as fixing vulnerabilities....

Windows Telephony Server Remote Code Execution Vulnerability

...

Windows Telephony Service Remote Code Execution Vulnerability

...

Windows Telephony Service Remote Code Execution Vulnerability

...

Windows Telephony Service Remote Code Execution Vulnerability

...

Windows Telephony Service Remote Code Execution Vulnerability

...

Windows Telephony Service Remote Code Execution Vulnerability

...

CVE-2025-21201: Double Free

Windows Telephony Server Remote Code Execution Vulnerability...

PT-2025-6333 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-6296 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. This is a remote code execution vulnerability in the Windows Telephony Service...

PT-2025-6332 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. This is a remote code execution vulnerability in the Windows Telephony Service...

PT-2025-6293 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. This is a remote code execution vulnerability in the Windows Telephony Service...

PT-2025-6297 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Server affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. It is a severe vulnerability that affects Microsoft Windows. Recommendations: At the...

CVE-2025-21406: Use After Free

Windows Telephony Service Remote Code Execution Vulnerability...

KB5052040: Windows 10 LTS 1507 Security Update (February 2025)

The remote Windows host is missing security update 5052040. It is, therefore, affected by multiple vulnerabilities - Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-21190, CVE-2025-21200, CVE-2025-21371, CVE-2025-21406, CVE-2025-21407 - Microsoft Digest Authentication Remot...

Microsoft Windows Telephony Server 安全漏洞

Microsoft Windows Telephony Server is a component of Microsoft Corporation USA that supports the Telephony Application Programming Interface TAPI, which allows computer programs to communicate with shared telephony services. A security vulnerability exists in Microsoft Windows Telephony Server. A...

CVE-2025-21407: Heap-based Buffer Overflow

Windows Telephony Service Remote Code Execution Vulnerability...

CVE-2025-21371: Heap-based Buffer Overflow

Windows Telephony Service Remote Code Execution Vulnerability...

PT-2025-6316

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. It is a remote code execution vulnerability in the Windows Telephony Service...