CVE-2026-42825

Published: Mag 12, 2026 Last Modified: Mag 12, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,0

Source: [email protected]

Attack Vector: local

Attack Complexity: high

Privileges Required: low

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

AI Translation Available

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

416

Stable

Abstraction: Variant Structure: Simple

Security Scopes Affected:

Integrity Availability Confidentiality

Potential Impacts:

Modify Memory Dos: Crash, Exit, Or Restart Read Memory Execute Unauthorized Code Or Commands

Languages: C, C++, Memory-Unsafe

Likelihood of Exploit: High

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42825