CVE-2026-62727
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A race condition in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
The risk is local privilege escalation, potentially leading to full system compromise and integrity violation.
Recommendation
Apply the latest security patches from Microsoft and restrict access to the Telephony Service for unauthorized users.
Other vulnerabilities in Windows Telephony Service
See all- CVE-2026-42825High
A 'use after free' vulnerability in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-40382High
A use after free vulnerability in Windows Telephony Service allows an authorized attacker to locally elevate privileges.
- CVE-2026-34338High
A use after free vulnerability in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-62748High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-62734High
A race condition exists in the Windows Telephony Service during concurrent execution using shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-62732High
A heap-based buffer overflow exists in the Windows Telephony Service. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-62729High
A race condition exists in the Windows Telephony Service during concurrent execution using shared resources. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-62726High
A use after free vulnerability exists in the Windows Telephony Service. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-62725High
A use after free vulnerability exists in the Windows Telephony Service. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-62724High
A use after free vulnerability exists in the Windows Telephony Service. This allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS