CVE-2026-69827
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
Risk Assessment
A remote attacker could exploit this vulnerability to execute code on the DNS server, potentially leading to disruption of network services.
Recommendation
Apply DNS server security updates and restrict access to DNS services from untrusted networks.
Other vulnerabilities in DNS Server
See all- CVE-2016-3227Critical
A use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests.
- CVE-2026-69989High
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-69782High
Race condition in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-50426Medium
Relative path traversal vulnerability in DNS Server allows an authorized attacker to execute code over an adjacent network.
- CVE-2026-49169High
Use-After-Free vulnerability in DNS Server allows an authorized attacker to execute code remotely over the network. The issue stems from improper memory management when processing specially crafted DNS queries.
- CVE-2026-42000Medium
Insufficient validation of names during AXFR (DNS zone transfer) may allow an attacker to inject malicious or malformed data.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.