CVE-2025-21339

Summary

CVE-2025-21339 is a remote code execution vulnerability affecting Microsoft's Windows Telephony Service. An attacker can exploit this vulnerability by sending a specially crafted request to a targeted system, resulting in the execution of arbitrary code with system privileges. Successful exploitation could lead to significant security compromises, including data theft or system takeover. Microsoft has released a patch to address this issue, and it is highly recommended that all affected systems be updated as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.