CVE-2024-43628

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 12, 2024
Updated: Nov 13, 2024
CWE ID 190

Summary

CVE-2024-43628 is a newly disclosed remote code execution vulnerability that affects the Windows Telephony Service. Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the targeted system. The vulnerability exists due to a weakness in the way the service handles certain input, and it can be exploited over the network. Organizations using unpatched systems are at risk, making it essential to apply the forthcoming Microsoft security update as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows
  • Microsoft Windows 11
  • Microsoft Windows Server 2008

Affected Vendors

  • Microsoft

Advisories, Assessments, and Mitigations