CVE-2026-40382
HighSummary
A use after free vulnerability in Windows Telephony Service allows an authorized attacker to locally elevate privileges.
Risk Assessment
An attacker with appropriate permissions can exploit this vulnerability to gain higher privileges on the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update the operating system to the latest version to mitigate this vulnerability and to monitor system logs for unauthorized activities.
Other vulnerabilities in Windows Telephony Service
See all- CVE-2026-42825High
A 'use after free' vulnerability in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-34338High
A use after free vulnerability in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-62727High
A race condition in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-62748High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-62734High
A race condition exists in the Windows Telephony Service during concurrent execution using shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-62732High
A heap-based buffer overflow exists in the Windows Telephony Service. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-62729High
A race condition exists in the Windows Telephony Service during concurrent execution using shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-62726High
A use after free vulnerability exists in the Windows Telephony Service. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-62725High
A use after free vulnerability exists in the Windows Telephony Service. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-62724High
A use after free vulnerability exists in the Windows Telephony Service. This allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.