CVE-2026-40382

CVE-2026-40382 is a use-after-free vulnerability in Windows Telephony Service that allows an authorized local attacker to elevate privileges. The CVSS 3.1 vector indicates a Local, Low-privilege, No-UI, with High confidentiality, integrity, and availability impact (base score 7.8). The connected ...

CVE-2026-34338 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-34338 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-34338

CVE-2026-34338 : Use-after-free in Windows Telephony Service allows an authorized attacker to elevate privileges locally. The publicly provided documents confirm the vulnerability and impact but do not reveal affected Windows versions, exact internal component, or remediation details. The NVD ent...

CVE-2026-42825 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-42825 Windows Telephony Service Elevation of Privilege Vulnerability

...

CVE-2026-42825

CVE-2026-42825 describes a use-after-free in Windows Telephony Service that allows an authorized attacker to elevate privileges locally. The description clearly states local privilege escalation as the impact, but the connected documents do not provide specifics on affected product versions, root...

CVE-2026-42825

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

Windows Telephony Service Elevation of Privilege Vulnerability

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows Telephony Server 资源管理错误漏洞

Microsoft Windows Telephony Server is a component of the American company Microsoft. It supports the Telephone Application Programming Interface TAPI, allowing computer programs to communicate with shared telephone services. There is a resource management vulnerability in Microsoft Windows...

Microsoft Windows Telephony Server 资源管理错误漏洞

Microsoft Windows Telephony Server is a component of the American company Microsoft. It supports the Telephone Application Programming Interface TAPI, allowing computer programs to communicate with shared telephone services. There is a resource management vulnerability in Microsoft Windows...

PT-2026-40254

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows Telephony Server 资源管理错误漏洞

Microsoft Windows Telephony Server is a component of the American company Microsoft. It supports the Telephone Application Programming Interface TAPI, allowing computer programs to communicate with shared telephone services. There is a resource management vulnerability in Microsoft Windows...

PT-2026-40157

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

PT-2026-40211

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-34275

Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite component: Setup and Administration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

[SECURITY] Fedora 42 Update: asterisk-18.26.4-1.fc42

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

vulnerabilities present in Oracle E-Business Suite

Oracle has identified vulnerabilities in the Oracle E-Business Suite. These vulnerabilities exist in various components of the Oracle E-Business Suite, including Oracle Advanced Inbound Telephony, Oracle Enterprise Command Center Framework, Oracle Advanced Supply Chain Planning, and Oracle Flow...