CVE-2026-59122

HighCVSS 7.0

Published: 11/08/2026(UTC)Updated: 16/08/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

A vulnerability in Windows Telephony Service is due to a race condition when sharing resources, allowing an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker could exploit the race condition to gain elevated privileges, potentially leading to system takeover.

Recommendation

Install Windows security updates. Restrict access to telephony services to trusted users only.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.