CYBERHAWK / CVE / CVE-2026-42912
CVE-2026-42912
HIGH
CVSS 7.0
other
The flaw
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
What to do
Review advisory and patch per vendor guidance.
References
In the news
- Microsoft and Adobe Patch Tuesday, June 2026 Security Update ReviewQualys · 2026-06-11
- Zero Day Initiative — The June 2026 Security Update Reviewthezdi.com · 2026-06-09
- Microsoft June 2026 Patch Tuesday fixes 6 zero-days, 200 flawsBleepingComputer · 2026-06-09