CVE-2026-116700

MediumCVSS 6.6/10Last modified Nov 10, 2026

Description

Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122CWE-190

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1167067.5Use after free in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over an adjacent network.CVE-2026-1167077.0Use after free in Windows Link Layer Topology Discovery Protocol allows an authorized attacker to elevate privileges locally.CVE-2026-116719.6Use after free in Navigation in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via CVE-2026-1167108.1Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.CVE-2026-1167147.8Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.CVE-2026-1167178.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.CVE-2026-1167187.5Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-1167198.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-116728.3Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer pCVE-2026-1167208.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-1167216.5Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-1167228.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-116700: Medium severity, CVSS 6.6 | Vulnix