PT-2026-24312 · Microsoft · Windows

H4Urek · Publicado 2026-03-10 · Atualizado 2026-03-16 · CVE-2026-25188

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows (affected versions not specified)

Description A heap-based buffer overflow exists in the Windows Telephony Service. This issue allows an unauthorized attacker to elevate privileges over an adjacent network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-122

Identificadores relacionados

BDU:2026-02990

CVE-2026-25188

Produtos afetados

Windows

Referências · 12

• https://twitter.com/rahsi_aaka/status/2033502816900407572 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-02990 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25188 · Nota de Segurança
• https://twitter.com/CveFindCom/status/2031447681982157259 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2031475361649996002 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2033361142584643800 · Publicação no Twitter
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-25188 · Aviso do Fabricante
• https://twitter.com/vuldb/status/2031438844609044536 · Publicação no Twitter
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-25188 · Aviso do Fabricante
• https://twitter.com/infoflowcloud/status/2033362956570747010 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-25188 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-25188 · Nota de Segurança