CVE-2026-61920

Missing release of memory after effective lifetime in Windows DNS. An unauthorized attacker can exploit this to cause a denial of service over a network.

Uncaught exception in Windows DNS. An unauthorized attacker can deny service over a network.

Improper enforcement of behavioral workflow in Windows DNS. An unauthorized attacker can deny service over a network.

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

A stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.

A use-after-free vulnerability in Windows DNS allows an unauthorized attacker to cause a denial of service over a network.

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.

Use-after-free in Windows DNS allows an authorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.