1123 matches found
Vulnerabilities in Microsoft Windows
Microsoft has fixed a large number of vulnerabilities in Windows. An attacker could exploit these vulnerabilities to carry out attacks that could result in the following types of damage, as listed in the table below. The most severe vulnerabilities are identified by the following CVE numbers:...
CVE-2026-62748
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62732
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62734
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62724
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62723
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62725
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62701
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-61353
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-59122
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62732 Windows Telephony Service Elevation of Privilege Vulnerability
...
EUVD-2026-56647
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62734 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62734 Windows Telephony Service Elevation of Privilege Vulnerability
...
CVE-2026-62732
CVE-2026-62732 is a heap-based buffer overflow in the Windows Telephony Service that enables a locally authenticated attacker to achieve privilege elevation. The vulnerability affects the Telephony Service component and is characterized by a local exploit path with low privileges required and no ...
CVE-2026-62734
CVE-2026-62734 describes a race condition due to concurrent execution with an improper synchronization in the Windows Telephony Service, allowing an authorized attacker to locally elevate privileges. The issue is identified as a local privilege escalation with a high impact on confidentiality, in...
EUVD-2026-56646
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-56640
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62726
CVE-2026-62726 is a Windows vulnerability described as a use-after-free in the Windows Telephony Service that enables local privilege escalation by an authorized user. The CVSS 3.1 vector (LOCAL, HIGH impact to confidentiality, integrity, and availability) yields a base score of 7.0. The provided...