Microsoft Windows Telephony Server Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in the Windows Telephony Server component. This issue allows an attacker to execute arbitrary code on the affected system. The vulnerability arises from a double-free error, which can be exploited by sending a request to a malicious server that returns harmful data, potentially leading to unauthorized code execution on the user's machine.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security update KB5051987 to address this vulnerability. This update is available through the Microsoft Update Catalog.