High severity7.0NVD Advisory· Published Aug 19, 2026· Updated Sep 8, 2026
CVE-2026-62727
CVE-2026-62727
Description
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Affected products
1Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62727nvdVendor Advisory
News mentions
2- Microsoft: 25 Vulnerabilities Disclosed, Including Exploited Entra ID FlawVypr Intelligence · Aug 20, 2026
- Microsoft Copilot & Windows: Four Vulnerabilities Patched in August 2026 BatchVypr Intelligence · Aug 19, 2026