CVE-2024-26230

Deeper analysis

Windows Telephony Server contains an elevation of privilege vulnerability tracked as CVE-2024-26230 and assigned CWE-416. The flaw affects the Windows Telephony Server component and carries a CVSS 3.1 base score of 7.8 reflecting local attack vector, low attack complexity, low privileges required, and no user interaction. Successful exploitation can result in full compromise of confidentiality, integrity, and availability on the affected system.

An authenticated local attacker can trigger the vulnerability to escalate privileges. Because the vector requires only low privileges and no user interaction, any process running under a standard user account on a vulnerable Windows host can be leveraged to obtain higher rights.

Microsoft has published remediation guidance in its Security Response Center update guide for CVE-2024-26230. The advisory directs administrators to apply the corresponding security updates released on the April 2024 Patch Tuesday cycle.

EPSS for the issue currently stands at 0.5318 with a recorded peak of 0.5505; the modest movement does not indicate a sharp post-disclosure rise in observed exploitation interest.