CVE-2026-61920

MediumCVSS 6.6

Published: 11/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

40th percentile - higher than 40% of all known CVEs

Summary

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.

Risk Assessment

An authorized user could exploit the race condition to execute malicious code on the DNS server, potentially leading to takeover.

Recommendation

Install Windows security updates and monitor network traffic on DNS servers.

Original NVD description (English source)

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.