CVE-2026-70119
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely execute code on the system, potentially leading to full control of the system or network.
Recommendation
Install Windows security updates that fix the out-of-bounds read issue in the DNS service.
Other vulnerabilities in Windows DNS
See all- CVE-2026-69730Critical
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-62878Critical
A stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-70166Medium
Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.
- CVE-2026-70155High
Missing release of memory after effective lifetime in Windows DNS. An unauthorized attacker can exploit this to cause a denial of service over a network.
- CVE-2026-70082High
Uncaught exception in Windows DNS. An unauthorized attacker can deny service over a network.
- CVE-2026-70079High
Improper enforcement of behavioral workflow in Windows DNS. An unauthorized attacker can deny service over a network.
- CVE-2026-70074Medium
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
- CVE-2026-78523Medium
A use-after-free vulnerability in Windows DNS allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-72987High
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-72948Medium
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS