Microsoft Windows Server 2025
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*
A heap-based buffer overflow vulnerability has been identified in the Windows Telephony Service. This vulnerability allows an unauthorized attacker to execute code remotely over a network. The issue arises when a client connects to a malicious server, potentially leading to unauthorized code execution on the client's machine.
Exploitation of this vulnerability could result in remote code execution on the affected system.
Security updates for this vulnerability are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Security Update Guide.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.