Описание
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2026-20931
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20931
- https://www.vicarius.io/vsociety/posts/cve-2026-20931-detection-script-elevation-of-privilege-vulnerability-in-windows-telephony-service
- https://www.vicarius.io/vsociety/posts/cve-2026-20931-mitigation-script-elevation-of-privilege-vulnerability-in-windows-telephony-service
Связанные уязвимости
CVSS3: 8
nvd
10 месяцев назад
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.
CVSS3: 8
msrc
10 месяцев назад
Windows Telephony Service Elevation of Privilege Vulnerability
CVSS3: 8
fstec
10 месяцев назад
Уязвимость службы Telephony Service операционных систем Windows, позволяющая нарушителю повысить свои привилегии