CVE-2021-26894

CriticalCVSS 9.8

Published: 11/03/2021(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

6.77%

93th percentile - higher than 93% of all known CVEs

Summary

Remote code execution vulnerability in Windows DNS Server. An attacker could exploit this flaw to execute arbitrary code in the context of the service.

Risk Assessment

Risk of taking control of the DNS server, which could compromise the integrity and availability of network infrastructure.

Recommendation

Install the latest security updates from Microsoft for Windows.

Original NVD description (English source)

Windows DNS Server Remote Code Execution Vulnerability