CVE-2024-21377
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
A vulnerability in Windows DNS allows information disclosure. An attacker could exploit this flaw to access sensitive data.
Risk Assessment
The risk is the potential leakage of information related to DNS infrastructure, which could facilitate further attacks.
Recommendation
It is recommended to apply Windows security updates to eliminate this vulnerability.
Other vulnerabilities in Windows DNS
See all- CVE-2026-62878Critical
A stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-70330Medium
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-70304Medium
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65799Medium
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65798Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65797Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65795Medium
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65789High
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-62883Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-62881Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Windows DNS Information Disclosure Vulnerability