Windows DNS vulnerabilities
33 known CVE vulnerabilities in Windows DNS, translated and rated.
- CVE-2026-69730Critical
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-62878Critical
A stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-78523Medium
A use-after-free vulnerability in Windows DNS allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-72987High
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-72948Medium
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-72928High
Use-after-free in Windows DNS allows an authorized attacker to execute code over a network.
- CVE-2026-70091Medium
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.
- CVE-2026-69858High
A use-after-free vulnerability in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-69813High
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-69680High
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.
- CVE-2026-69672Medium
Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.
- CVE-2026-69631High
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
- CVE-2026-69551High
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
- CVE-2026-69369Medium
An out-of-bounds read vulnerability in Windows DNS allows an authorized attacker to disclose information locally.
- CVE-2026-69310High
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-70330Medium
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-70304Medium
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65799Medium
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65798Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65797Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65795Medium
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65789High
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-62883Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-62881Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-62820High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-62817High
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-62787High
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
- CVE-2026-62778High
Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-62769Medium
A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-61920Medium
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.
- CVE-2026-49175High
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2024-21377Medium
A vulnerability in Windows DNS allows information disclosure. An attacker could exploit this flaw to access sensitive data.
- CVE-2021-36968High
Elevation of privilege vulnerability in Windows DNS. An attacker could exploit it to gain higher privileges on the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

