CVE-2026-62729

HighCVSS 7.0

Published: 11/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

A race condition exists in the Windows Telephony Service during concurrent execution using shared resources. This allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker with local privileges could gain higher privileges, potentially leading to full system compromise or malware installation.

Recommendation

Install the latest Windows security updates from the vendor. Restrict system access to trusted users only.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.