CVE-2026-42912: Windows Telephony Service Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Other sources
Windows Telephony Service Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-42912?
The severity of CVE-2026-42912 is classified as high with a score of 7.
What systems are affected by CVE-2026-42912?
CVE-2026-42912 affects Microsoft Windows 10, Windows 11, and various versions of Windows Server 2012 through 2025.
How do I fix CVE-2026-42912?
To fix CVE-2026-42912, ensure that you apply the latest security updates provided by Microsoft for your affected operating systems.
What is the nature of the vulnerability CVE-2026-42912?
CVE-2026-42912 is a race condition vulnerability in Windows Telephony Service that allows an attacker to elevate privileges.
Who can exploit CVE-2026-42912?
CVE-2026-42912 can be exploited by an authorized attacker with local access to the affected systems.