High severity7.0NVD Advisory· Published Aug 11, 2026· Updated Aug 11, 2026
CVE-2026-62748
CVE-2026-62748
Description
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- Microsoft Patch Tuesday Update August 2026 – 394 Vulnerabilities Fixed, Including 3 Zero-DaysCyber Security News · Aug 11, 2026