Remote Code Execution Vulnerability in Windows Telephony Service by Microsoft
CVE-2025-21240
8.8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 14 January 2025
What is CVE-2025-21240?
The vulnerability in the Windows Telephony Service allows for remote code execution that can be exploited by an attacker. Successful exploitation could lead to unauthorized execution of commands or malware installation without user interaction. This can significantly compromise the confidentiality, integrity, and availability of affected systems. It is crucial for users to apply the latest security updates to mitigate any potential risks associated with this vulnerability.
Affected Version(s)
Windows 10 Version 1507 32-bit Systems 10.0.10240.0 < 10.0.10240.20890
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.7699
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.6775