612 matches found
CVE-2026-70304
Windows DNS contains a heap-based buffer overflow exploitable by an authorized local attacker to elevate privileges. NVD rates it HIGH (7.8, PR:L); Microsoft's CVSS rates MEDIUM (6.7, PR:H). No in-the-wild exploitation reported. Patch via August 2026 Microsoft security updates (KB5121000, KB51202...
CVE-2026-70330
CVE-2026-70330 is a heap-based buffer overflow in the Windows DNS service that allows an authorized attacker to elevate privileges locally . NVD assigns a CVSS 3.1 score of 7.8 (HIGH) with low privileges required, while Microsoft's CNA score is 6.7 (MEDIUM) requiring high privileges. CISA SSVC as...
CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability
...
EUVD-2026-56442
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-62878
CVE-2026-62878 is a Windows DNS Server remote code execution vulnerability caused by a stack-based buffer overflow. The NVD entry indicates a network-based exploit with a critical CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Impact is the ability for an unauthenticated, remo...
EUVD-2026-56400
Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability
...
CVE-2026-62820
CVE-2026-62820 concerns Windows DNS Server. The issue is a race condition caused by concurrent execution using a shared resource with improper synchronization, leading to remote code execution over a network. Affected product is Windows DNS Server; the vulnerability is triggered via network acces...
EUVD-2026-56397
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-62817
CVE-2026-62817 describes an out-of-bounds write in Windows DNS Server that enables remote code execution by an unauthenticated attacker over an adjacent network. The advisory consistently identifies the affected component as Windows DNS Server and cites a high-severity impact (CVSS v3.1: 8.8, AV:...
CVE-2026-62817 Windows DNS Server Remote Code Execution Vulnerability
...
EUVD-2026-56394
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network...
CVE-2026-62817 Windows DNS Server Remote Code Execution Vulnerability
...
EUVD-2026-56386
Use after free in Windows DNS allows an authorized attacker to execute code over a network...