CVE-2025-21246

Summary

CVE-2025-21246 is a remote code execution vulnerability affecting the Windows Telephony Service. An attacker can exploit this vulnerability by sending a specially crafted RTP (Real-time Transport Protocol) packet to a targeted system, resulting in arbitrary code execution with system privileges. Successful exploitation could lead to serious consequences, including data theft, system compromise, and unauthorized access. Microsoft has released a patch to address this vulnerability, and it is strongly recommended that all affected systems be updated as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.