High · published January 13, 2026
⚡ An authorized attacker can turn the tables with just a file name! This external control vulnerability in Windows Telephony Service opens the door to privilege elevation over adjacent networks. 🔥 Think of it like a hotel concierge who, instead of just checking you in, also reads your room number and gives themselves access to all the luxury suites — all because they got a little too friendly with the room keys! If exploited, this means an attacker could gain elevated privileges, potentially compromising sensitive information or systems on the adjacent network. The implications could be absolutely devastating, altering the landscape of your security posture dramatically!
Think of it like a hotel concierge who, instead of just checking you in, also reads your room number and gives themselves access to all the luxury suites — all because they got a little too friendly with the room keys! This vulnerability allows an authorized user to control file names or paths, leading to unauthorized privilege escalation within the Windows Telephony Service. Essentially, it mismanages access controls, enabling escalation beyond intended permissions.
If exploited, this means an attacker could gain elevated privileges, potentially compromising sensitive information or systems on the adjacent network. The implications could be absolutely devastating, altering the landscape of your security posture dramatically! To mitigate this risk, ensure you apply the latest security updates from Microsoft. Additionally, review user permissions to limit access to necessary functions only. Be proactive and audit your network for any unauthorized configurations! You've got this! By taking these steps, you'll be one step closer to fortifying your defenses! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1607 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_10_1607 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_10_1809 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_10_1809 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_10_21h2 | < 10.0.19044.6809 | 10.0.19044.6809 |
| microsoft/windows_10_22h2 | < 10.0.19045.6809 | 10.0.19045.6809 |
| microsoft/windows_11_23h2 | < 10.0.22631.6491 | 10.0.22631.6491 |
| microsoft/windows_11_24h2 | < 10.0.26100.7623 | 10.0.26100.7623 |
| microsoft/windows_11_25h2 | < 10.0.26200.7623 | 10.0.26200.7623 |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.8783 | 10.0.14393.8783 |
| microsoft/windows_server_2019 | < 10.0.17763.8276 | 10.0.17763.8276 |
| microsoft/windows_server_2022 | < 10.0.20348.4648 | 10.0.20348.4648 |
| microsoft/windows_server_2022_23h2 | < 10.0.25398.2092 | 10.0.25398.2092 |
| microsoft/windows_server_2025 | < 10.0.26100.32230 | 10.0.26100.32230 |