Описание
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2026-20931
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20931
- https://www.vicarius.io/vsociety/posts/cve-2026-20931-detection-script-elevation-of-privilege-vulnerability-in-windows-telephony-service
- https://www.vicarius.io/vsociety/posts/cve-2026-20931-mitigation-script-elevation-of-privilege-vulnerability-in-windows-telephony-service
Связанные уязвимости
CVSS3: 8
nvd
7 месяцев назад
External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network.
CVSS3: 8
msrc
7 месяцев назад
Windows Telephony Service Elevation of Privilege Vulnerability
CVSS3: 8
fstec
7 месяцев назад
Уязвимость службы Telephony Service операционных систем Windows, позволяющая нарушителю повысить свои привилегии