CVE-2026-116700: Windows Telephony Service Elevation of Privilege Vulnerability
Published Nov 10, 2026
·Updated
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack.
Other sources
Windows Telephony Service Elevation of Privilege Vulnerability
— Microsoft
Affected Software
18 affected componentsFixes available
Microsoft Windows 10=1809, >=10.0.17763<10.0.17763.9487
10.0.17763.9487
Microsoft Windows 10=22H2, >=10.0.19045<10.0.19045.7846
10.0.19045.7846
Microsoft Windows 10=21H2, >=10.0.19044<10.0.19044.7846
10.0.19044.7846
Microsoft Windows Server 2019<10.0.17763.9487
10.0.17763.9487
Microsoft Windows Server 2022<10.0.20348.5870
10.0.20348.5870
Microsoft Windows 11=23H2, >=10.0.22631<10.0.22631.7711
10.0.22631.7711
Microsoft Windows Server 2022<10.0.20348.5870
10.0.20348.5870
Microsoft Windows 11=23H2, >=10.0.22631<10.0.22631.7711
10.0.22631.7711
Microsoft Windows 10=21H2, >=10.0.19044<10.0.19044.7846
10.0.19044.7846
Microsoft Windows 10=21H2, >=10.0.19044<10.0.19044.7846
10.0.19044.7846
Microsoft Windows Server 2016<10.0.14393.9688
10.0.14393.9688
Microsoft Windows 10=1607, >=10.0.14393<10.0.14393.9688
10.0.14393.9688
Microsoft Windows 10=1607, >=10.0.14393<10.0.14393.9688
10.0.14393.9688
Microsoft Windows 10=22H2, >=10.0.19045<10.0.19045.7846
10.0.19045.7846
Microsoft Windows 10=1809, >=10.0.17763<10.0.17763.9487
10.0.17763.9487
Microsoft Windows 10=22H2, >=10.0.19045<10.0.19045.7846
10.0.19045.7846
Microsoft Windows Server 2016<10.0.14393.9688
10.0.14393.9688
Microsoft Windows Server 2019<10.0.17763.9487
10.0.17763.9487
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9487Patch KB5131085 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.7846Patch KB5131096 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.7846Patch KB5131096 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7711Patch KB5131087 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5870Patch KB5131090 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9688Patch KB5131291
Event History
Nov 10, 2026
CVE Published
via Microsoft·04:00 PM
Data Sourced
via Microsoft·04:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·06:20 PM
Data Sourced
via MITRE·06:20 PM
DescriptionSeverity
Data Sourced
via NVD·07:19 PM
DescriptionSeverityWeakness