CVE-2024-43622

Summary

CVE-2024-43622 is a newly disclosed remote code execution vulnerability affecting the Windows Telephony Service. An attacker can exploit this issue by sending specially crafted packets to a targeted system, resulting in arbitrary code execution with elevated privileges. Successful exploitation could lead to unauthorized system access, data theft, or further attacks. Microsoft is working on a patch to address this vulnerability and encourages users to apply it as soon as it becomes available. In the meantime, it is recommended to apply defensive measures such as firewall rules and access control lists to limit exposure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.