CVE-2026-69551
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk58th percentile - higher than 58% of all known CVEs
Summary
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
Risk Assessment
An attacker could exploit this vulnerability to execute code remotely on a DNS server, potentially leading to service takeover and network integrity compromise.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows DNS
See all- CVE-2026-69730Critical
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-62878Critical
A stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-78523Medium
A use-after-free vulnerability in Windows DNS allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-72987High
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-72948Medium
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-72928High
Use-after-free in Windows DNS allows an authorized attacker to execute code over a network.
- CVE-2026-70091Medium
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.
- CVE-2026-69858High
A use-after-free vulnerability in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-69813High
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-69680High
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.
Original NVD description (English source)
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS