CVE-2026-70330: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...

PT-2026-70691

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

CVE-2026-62787: Use After Free

Use after free in Windows DNS allows an authorized attacker to execute code over a network...

PT-2026-70530

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A use-after-free condition in Windows DNS allows an unauthorized attacker to elevate privileges over a network. Use-after-free is a memory corruption issue that occurs when an application...

KB5120418: Windows 10 Version 1607 / Windows Server 2016 Security Update (August 2026)

The remote Windows host is missing security update 5120418. It is, therefore, affected by multiple vulnerabilities - Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-62878 - Use after free in Windows Deployment Services allows an...

KB5120233: Windows Server 2025 Security Update (August 2026)

The remote Windows host is missing security update 5120233 or hotpatch 5120228. It is, therefore, affected by multiple vulnerabilities - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-62815 - Stack-based buffer overflow in Windows DNS...

EUVD-2026-44091

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...

EUVD-2026-44053

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...

CVE-2026-50495

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...

CVE-2026-50487

Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50465

Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...

CVE-2026-50295

Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally...

CVE-2026-49174

Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...

CVE-2026-49175

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-50487

CVE-2026-50487 is a Windows DNS Client use-after-free memory corruption vulnerability in the Windows DNS component that allows a network-based attacker to elevate privileges without user interaction. Affected product: Microsoft Windows DNS Client. Root cause: use-after-free in DNS handling leadin...

CVE-2026-50465 Windows DNS Client Tampering Vulnerability

...

CVE-2026-50426

CVE-2026-50426 : Windows DNS Server contains a relative path traversal vulnerability that could allow an authorized attacker on an adjacent network to execute code. Root cause is traversal of relative paths in DNS Server handling, enabling remote code execution. Reported impact is arbitrary code ...

CVE-2026-50426 Windows DNS Server Remote Code Execution Vulnerability

...

CVE-2026-50295

Technical details about CVE-2026-50295 are not publicly provided in the supplied documents. Monitor for updates from official sources.

CVE-2026-49174

CVE-2026-49174 describes a vulnerability in Microsoft Windows DNS where missing authentication for a critical function could allow a locally authorized attacker to tamper with DNS behavior. The NVD entry notes a CVSS v3.1 base score of 6.1 (Medium) with a LOCAL attack vector, LOW attack complexit...