CVE-2020-1350

CVE-2020-1350 SigRED Workaround to mitigate the impact of the vulnerability by reducing the TCP Recieve Packet Size Maximum Limit on the DNS Server and restarting DNS...

CVE-2021-23017

CVE-2021-23017 PoC Scanner NGINX DNS Overflow Vulnerability Check - CVE-2021-23017 PoC This Python script checks if an nginx server is potentially vulnerable to the critical CVE-2021-23017 vulnerability, which affects the integrated DNS resolver in nginx and can cause a buffer overflow. 🔍 What do...

CVE-2015-7547-master

We are providing this code as-is. You are responsible for protecting yourself, your property and data, and others from any risks caused by this code. This code may cause unexpected and undesirable behavior to occur on your machine. This code may not detect the vulnerability on your system. Note...

CVE-2026-72987

CVE-2026-72987 is a use after free vulnerability in Windows DNS that allows an unauthorized attacker to execute code over a network, resulting in full compromise of confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.1 (HIGH) , with a network attack vector, high complexity,...

EUVD-2026-73743

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-72928

A use-after-free vulnerability in Windows DNS Server allows an authorized (low-privilege) attacker to execute remote code over a network . The CVSS 3.1 score is 7.5 (High) , reflecting a network attack vector with high complexity but high impact to confidentiality, integrity, and availability. Th...

EUVD-2026-73662

Use after free in Windows DNS allows an authorized attacker to execute code over a network...

EUVD-2026-73636

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-69858

CVE-2026-69858 is a use-after-free vulnerability in Windows DNS that allows an unauthorized attacker to achieve remote code execution over a network . The CVSS v3.1 score is 8.1 (HIGH) with a vector of network access, high complexity, no required privileges, and no user interaction, leading to hi...

CVE-2026-69813

A use-after-free flaw in Windows DNS Server allows an unauthenticated remote attacker to achieve code execution over the network . The vulnerability is rated CVSS 3.1 8.1 (HIGH) , with an attack vector of network, high complexity, and no required privileges or user interaction. No specific affect...

EUVD-2026-73634

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...

EUVD-2026-73608

Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally...

CVE-2026-69672

Windows DNS contains an information disclosure vulnerability caused by a use of uninitialized resource . An authenticated attacker with local access and low privileges can exploit it to disclose information, with no user interaction required. The CVSS 3.1 score is 5.5 (MEDIUM) , reflecting high c...

CVE-2026-69680

CVE-2026-69680 is an origin validation error in Windows DNS that allows an unauthorized network attacker to perform spoofing . Microsoft rates the vulnerability CVSS 8.1 (High) with a network attack vector, high complexity, no required privileges, and no user interaction, resulting in high impact...

EUVD-2026-73564

Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network...

EUVD-2026-73478

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally...

CVE-2026-69369

CVE-2026-69369 is an out-of-bounds read in Windows DNS that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low privileges required, and high impact to confidentiality only. CISA's SSVC assessment indicates no known explo...

EUVD-2026-73342

Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69827

CVE-2026-69827 affects Windows DNS Server and is caused by a race condition due to improper synchronization of a shared resource during concurrent execution. An unauthorized attacker can exploit this flaw to achieve remote code execution over the network. The Microsoft-assigned CVSS 3.1 score is ...

CVE-2026-69989

This use-after-free vulnerability in Windows DNS Server allows an unauthorized, unprivileged attacker to execute code over a network. The CVSS 3.1 base score is 8.1 (HIGH) , reflecting a network vector with high attack complexity and no required privileges or user interaction, with high impact to...