CVE Catalog

CVE-2026-62727

HighCVSS 7.0
Published: Translated: NVD NIST

Summary

A race condition in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Risk Assessment

The risk is local privilege escalation, potentially leading to full system compromise and integrity violation.

Recommendation

Apply the latest security patches from Microsoft and restrict access to the Telephony Service for unauthorized users.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS