PT-2025-1168 · Microsoft · Windows

Published 2025-01-14 · Updated 2025-01-24 · CVE-2025-21246

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

The Windows Telephony Service is affected by a remote code execution issue, which can be exploited by attackers to execute arbitrary code and impact the system. This issue is critical and can have significant consequences if exploited. The vulnerable software is Windows, but no specific versions are mentioned. An exploit for this issue may be available, and users can find more information on how to protect against this issue at https://t.co/Ud0qF120qY. It is essential for users to take protective measures to secure their systems against this threat. #WindowsTelephonyService #RemoteCodeExecution #WindowsVulnerability #CyberSecurity #Exploit #Windows #TelephonyService

Fix

RCE

Out of bounds Read

Heap Based Buffer Overflow

Weakness Enumeration

CWE-125

CWE-122

Related Identifiers

BDU:2025-00450

CVE-2025-21246

Affected Products

Windows

References · 9

• https://osv.dev/vulnerability/CVE-2025-21246 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21246 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/716881 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21246 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21246 · Security Note
• https://bdu.fstec.ru/vul/2025-00450 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-21246 · Vendor Advisory
• https://twitter.com/windowsforum/status/1879262761214984409 · Twitter Post
• https://t.me/cvenotify/108570 · Telegram Post