CVE-2026-69631
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
Risk Assessment
A remote attacker could cause a denial of service, potentially leading to system or network unavailability.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows DNS
See all- CVE-2026-69730Critical
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-62878Critical
A stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-78523Medium
A use-after-free vulnerability in Windows DNS allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-72987High
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-72948Medium
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-72928High
Use-after-free in Windows DNS allows an authorized attacker to execute code over a network.
- CVE-2026-70091Medium
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.
- CVE-2026-69858High
A use-after-free vulnerability in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-69813High
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-69680High
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.
Original NVD description (English source)
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS