24113 matches found
EUVD-2026-73634
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
EUVD-2026-73608
Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally...
CVE-2026-69672
Windows DNS contains an information disclosure vulnerability caused by a use of uninitialized resource . An authenticated attacker with local access and low privileges can exploit it to disclose information, with no user interaction required. The CVSS 3.1 score is 5.5 (MEDIUM) , reflecting high c...
CVE-2026-69680
CVE-2026-69680 is an origin validation error in Windows DNS that allows an unauthorized network attacker to perform spoofing . Microsoft rates the vulnerability CVSS 8.1 (High) with a network attack vector, high complexity, no required privileges, and no user interaction, resulting in high impact...
EUVD-2026-73564
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-73478
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally...
CVE-2026-69369
CVE-2026-69369 is an out-of-bounds read in Windows DNS that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low privileges required, and high impact to confidentiality only. CISA's SSVC assessment indicates no known explo...
EUVD-2026-73342
Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-69827
CVE-2026-69827 affects Windows DNS Server and is caused by a race condition due to improper synchronization of a shared resource during concurrent execution. An unauthorized attacker can exploit this flaw to achieve remote code execution over the network. The Microsoft-assigned CVSS 3.1 score is ...
CVE-2026-69989
This use-after-free vulnerability in Windows DNS Server allows an unauthorized, unprivileged attacker to execute code over a network. The CVSS 3.1 base score is 8.1 (HIGH) , reflecting a network vector with high attack complexity and no required privileges or user interaction, with high impact to...
EUVD-2026-73341
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
EUVD-2026-73321
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-78523
A use-after-free vulnerability in Windows DNS Server allows an unauthenticated, remote attacker to cause a denial of service over the network. NVD scores it 7.5 (HIGH) with low attack complexity, while Microsoft's CNA rates it 5.9 (MEDIUM) with high attack complexity. CISA's SSVC assessment indic...
EUVD-2026-73275
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
CVE-2026-77505
CVE-2026-77505 is a use after free vulnerability in Windows DNS Server that allows an unauthorized, unauthenticated attacker to execute code over a network. The flaw is scored 8.1 (HIGH) under CVSS 3.1, with a network attack vector, high attack complexity, no required privileges, and high impact ...
EUVD-2026-73114
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-72948
CVE-2026-72948 is a local privilege escalation vulnerability in Windows DNS caused by a relative path traversal . An authorized attacker (high privileges required) can exploit it locally with low complexity and no user interaction, achieving full compromise of confidentiality, integrity, and avai...
CVE-2026-69730
CVE-2026-69730 is a use-after-free vulnerability in Windows DNS that allows an unauthorized, remote attacker to execute arbitrary code over the network without any user interaction or prior privileges. Microsoft rates it CVSS 9.8 (Critical) , with high impact on confidentiality, integrity, and av...