CVE-2021-34525
HighCVSS 8.8Exploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
Remote code execution vulnerability in Windows DNS Server. An attacker could send specially crafted DNS queries to execute code on the server.
Risk Assessment
Compromise of the DNS server could disrupt the entire network and enable attacks on other systems.
Recommendation
Immediately install security updates for Windows Server.
Other vulnerabilities in Windows DNS Server
See all- CVE-2021-27063High
Denial of service vulnerability in Windows DNS Server. An attacker could exploit this vulnerability to cause the DNS service to become unavailable.
- CVE-2021-26897Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit it to execute code on the DNS server.
- CVE-2021-26896High
Denial of service vulnerability in Windows DNS Server. An attacker could exploit this vulnerability to cause the DNS service to become unavailable.
- CVE-2021-26895Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit it to execute code on the DNS server.
- CVE-2021-26894Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit this flaw to execute arbitrary code in the context of the service.
- CVE-2021-26893Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit this flaw to execute arbitrary code in the context of the service.
- CVE-2021-26877Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit it to execute code on the DNS server.
- CVE-2023-35346Medium
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
- CVE-2023-35345Medium
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
- CVE-2023-35344Medium
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to take control of the system.
Original NVD description (English source)
Windows DNS Server Remote Code Execution Vulnerability