Microsoft Windows Telephony Service Heap-Based Buffer Overflow Vulnerability Allowing Remote Code Execution

Vulnerability

A heap-based buffer overflow vulnerability has been identified in the Windows Telephony Service. This vulnerability allows an unauthorized attacker to execute code remotely over a network. The issue arises when a client connects to a malicious server, potentially leading to unauthorized code execution on the client's machine.

Impact

Exploitation of this vulnerability could result in remote code execution on the affected system.

Remediation

Security updates for this vulnerability are available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Security Update Guide.

Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
4.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.