CVE-2026-61920 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-70304

Windows DNS contains a heap-based buffer overflow exploitable by an authorized local attacker to elevate privileges. NVD rates it HIGH (7.8, PR:L); Microsoft's CVSS rates MEDIUM (6.7, PR:H). No in-the-wild exploitation reported. Patch via August 2026 Microsoft security updates (KB5121000, KB51202...

CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability

...

EUVD-2026-56587

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-70304 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-70330

CVE-2026-70330 is a heap-based buffer overflow in the Windows DNS service that allows an authorized attacker to elevate privileges locally . NVD assigns a CVSS 3.1 score of 7.8 (HIGH) with low privileges required, while Microsoft's CNA score is 6.7 (MEDIUM) requiring high privileges. CISA SSVC as...

EUVD-2026-56586

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-70330 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability

...

EUVD-2026-56442

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-65789 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62878 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62878

CVE-2026-62878 is a Windows DNS Server remote code execution vulnerability caused by a stack-based buffer overflow. The NVD entry indicates a network-based exploit with a critical CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Impact is the ability for an unauthenticated, remo...

EUVD-2026-56400

Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-62820 Windows DNS Server Remote Code Execution Vulnerability

...

EUVD-2026-56397

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to execute code over a network...

CVE-2026-62820

CVE-2026-62820 concerns Windows DNS Server. The issue is a race condition caused by concurrent execution using a shared resource with improper synchronization, leading to remote code execution over a network. Affected product is Windows DNS Server; the vulnerability is triggered via network acces...