This vulnerability (CVE-2025-21305) involves a heap-based buffer overflow in the Windows Telephony Service on Windows 10 Version 1507 (build 10.0.10240.0). It enables remote attackers to execute arbitrary code remotely, potentially leading to full system compromise. The CVSS 3.1 base score is 8.8, indicating a high severity with network attack vector, low attack complexity, no privileges required, and user interaction needed. Microsoft has released an official fix to remediate this vulnerability.

Successful exploitation of this vulnerability can lead to remote code execution, allowing attackers to gain control over the affected system. The impact includes complete compromise of confidentiality, integrity, and availability of the system. No known exploits in the wild have been reported at the time of publication.

An official patch is available from Microsoft to remediate this vulnerability. Users and administrators should apply the update provided in the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21305 to protect affected systems. No additional mitigation actions are specified by the vendor.