CVE Catalog
CVE-2026-62732
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.32%
25th percentile - higher than 25% of all known CVEs
Summary
A heap-based buffer overflow exists in the Windows Telephony Service. This allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit this to execute code in kernel context, potentially leading to full system compromise.
Recommendation
Install the latest Windows security updates. Restrict access to telephony services to trusted users only.
Original NVD description (English source)
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.