CVE-2025-21413

Summary

CVE-2025-21413 is a remote code execution vulnerability affecting the Windows Telephony Service. An attacker can exploit this vulnerability by sending a specially crafted RTP (Real-time Transport Protocol) packet to a targeted system. Successful exploitation allows the attacker to gain control of the affected system and execute arbitrary code. This vulnerability poses a significant risk to organizations that use Windows Telephony Service and have exposure to untrusted networks or remote connections. It is recommended that affected systems are promptly patched to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.