CVE-2026-62748

HighCVSS 7.0

Published: 11/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Risk Assessment

The race condition could be exploited to escalate privileges and take control of the system.

Recommendation

Apply Windows security updates to fix the synchronization issue.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.