CVE-2025-21238
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jan 14, 2025
CWE ID 122
Summary
CVE-2025-21238 is a remote code execution vulnerability affecting the Windows Telephony Service. An attacker can exploit this flaw by sending maliciously crafted messages to a targeted system, resulting in the execution of arbitrary code. Successful exploitation grants the attacker full system access, potentially leading to significant data loss or system compromise. Microsoft has released a patch to mitigate this vulnerability. It is strongly recommended that users apply the patch as soon as possible to protect against potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
Affected Vendors
- Microsoft