CVE-2026-42912

HighCVSS 7.0/10Last modified Jul 23, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362

Affected software

No affected versions have been published.

Timeline

Published: Jun 9, 2026
Last modified: Jul 23, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-429137.5Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized CVE-2026-429145.3Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.CVE-2026-429155.5Incorrect calculation of buffer size in Windows VMSwitch allows an authorized attacker to deny service locally.CVE-2026-429167.8Integer overflow or wraparound in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-429174.8Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may allow CVE-2026-429196.7A vulnerability exists in BIG-IP systems that may allow an authenticated attacker with administrative access to escalate their privileges. A CVE-2026-42922.7An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Admin changelist forms using `ModelAdmin.list_editabl CVE-2026-429207.5When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic CVE-2026-429229.8A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request CVE-2026-429235.3NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the negativ CVE-2026-429248.7An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects through iControl SOAP CVE-2026-429265.8When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxy_http_version to 2, and also uses proxy_set_body, an attacker m