Microsoft Windows Telephony Service Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the Windows Telephony Service. This vulnerability allows an attacker to execute arbitrary code on the affected system. It arises from a heap-based buffer overflow, where malicious data from a server could be processed in a way that allows code execution on the client's machine.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution on the affected system.

Remediation

Users can apply the security update KB5051987 to address this vulnerability. This update is available through the Microsoft Update Catalog.