Elevation of Privilege Vulnerability in Windows Telephony Service
CVE-2026-20931
8HIGH
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 13 January 2026
What is CVE-2026-20931?
The Windows Telephony Service is susceptible to a vulnerability that enables an authorized attacker to manipulate file paths or names, potentially leading to a privilege escalation. This flaw allows the attacker to gain elevated permissions over an adjacent network, which may expose systems to further exploitation and compromise sensitive information.
Affected Version(s)
Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.8783
Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.8276
Windows 10 Version 21H2 32-bit Systems 10.0.19044.0 < 10.0.19044.6809
References
CVSS V3.1
Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved