773 matches found
EUVD-2026-73608
Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally...
CVE-2026-69680
CVE-2026-69680 is an origin validation error in Windows DNS that allows an unauthorized network attacker to perform spoofing . Microsoft rates the vulnerability CVSS 8.1 (High) with a network attack vector, high complexity, no required privileges, and no user interaction, resulting in high impact...
EUVD-2026-73564
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-69369
CVE-2026-69369 is an out-of-bounds read in Windows DNS that allows an authorized local attacker to disclose information. The CVSS 3.1 score is 5.5 (Medium) with a local attack vector, low privileges required, and high impact to confidentiality only. CISA's SSVC assessment indicates no known explo...
EUVD-2026-73478
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally...
CVE-2026-78523
A use-after-free vulnerability in Windows DNS Server allows an unauthenticated, remote attacker to cause a denial of service over the network. NVD scores it 7.5 (HIGH) with low attack complexity, while Microsoft's CNA rates it 5.9 (MEDIUM) with high attack complexity. CISA's SSVC assessment indic...
EUVD-2026-73321
Use after free in Windows DNS allows an unauthorized attacker to deny service over a network...
EUVD-2026-73114
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-72948
CVE-2026-72948 is a relative path traversal vulnerability in Windows DNS that allows an authorized attacker to escalate privileges locally . Microsoft rates it MEDIUM (CVSS 6.7) requiring high privileges, while NVD assigns HIGH (7.8) with low privileges required. CISA's SSVC assesses no known exp...
EUVD-2026-73069
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...
CVE-2026-69730
CVE-2026-69730 is a use-after-free vulnerability in Windows DNS that allows an unauthorized, remote attacker to execute arbitrary code over the network without any user interaction or prior privileges. Microsoft rates it CVSS 9.8 (Critical) , with high impact on confidentiality, integrity, and av...
CVE-2026-69631
CVE-2026-69631 is an integer overflow or wraparound vulnerability in Windows DNS that allows an unauthenticated remote attacker to cause a denial of service over a network. The CVSS 3.1 score is 7.5 (HIGH) with the vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating a network-based attack with...
EUVD-2026-73036
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network...
EUVD-2026-73001
Use after free in Windows DNS allows an authorized attacker to execute code over a network...
CVE-2026-69551
Windows DNS Server is affected by a use after free vulnerability that allows an authorized attacker to execute arbitrary code over the network. The vulnerability is rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-based attack with low complexity th...
EUVD-2026-73220
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-69310
CVE-2026-69310 is a use-after-free vulnerability in Windows DNS that allows an authorized attacker to elevate privileges locally. The flaw resides in the DNS component and requires local access with low privileges and no user interaction, though the attack complexity is rated as high. The CVSS 3....
EUVD-2026-73171
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-70091
CVE-2026-70091 is a race condition in Windows DNS caused by concurrent execution using a shared resource with improper synchronization. An unauthorized, network-based attacker can exploit this to cause a denial of service . The vulnerability is rated CVSS 5.9 (MEDIUM) with a network attack vector...
