Windows Telephony Service Remote Code Execution Vulnerability

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.

How could an attacker exploit this vulnerability?
An attacker could exploit this vulnerability by tricking a user into sending a request to a malicious server. This could result in the server returning malicious data that might cause arbitrary code execution on the user's system.

Security updates
10.0.17763.6532 — https://support.microsoft.com/help/5046615
10.0.20348.2849 — https://support.microsoft.com/help/5046616
10.0.20348.2819 — https://support.microsoft.com/help/5046698
10.0.19044.5131 — https://support.microsoft.com/help/5046613
10.0.22621.4460 — https://support.microsoft.com/help/5046633
10.0.25398.1251 — https://support.microsoft.com/help/5046618
10.0.26100.2314 — https://support.microsoft.com/help/5046617
10.0.26100.2240 — https://support.microsoft.com/help/5046696
10.0.10240.20826 — https://support.microsoft.com/help/5046665
10.0.14393.7515 — https://support.microsoft.com/help/5046612
6.0.6003.22966 — https://support.microsoft.com/help/5046661
6.0.6003.22966 — https://support.microsoft.com/help/5046639
6.1.7601.27415 — https://support.microsoft.com/help/5046687
6.1.7601.27415 — https://support.microsoft.com/help/5046705
6.2.9200.25165 — https://support.microsoft.com/help/5046697
6.3.9600.22267 — https://support.microsoft.com/help/5046682