Microsoft Windows Telephony Service Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the Windows Telephony Service. This issue allows an attacker to execute arbitrary code on the affected system. The vulnerability is present in several versions of Windows Server and Windows 10, as well as in Windows 11 and Windows Server 2022.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can apply the security update provided by Microsoft to address this vulnerability. This security update is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5050009, KB5049984, KB5050048, KB5050063, KB5049993, and KB5050013.