Windows DNS vulnerabilities
19 known CVE vulnerabilities in Windows DNS, translated and rated.
- CVE-2026-62878Critical
A stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-70330Medium
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-70304Medium
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65799Medium
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65798Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65797Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65795Medium
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65789High
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-62883Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-62881Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-62820High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-62817High
Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-62787High
Use after free in Windows DNS allows an authorized attacker to execute code over a network.
- CVE-2026-62778High
Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-62769Medium
A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-61920Medium
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.
- CVE-2026-49175High
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2024-21377Medium
A vulnerability in Windows DNS allows information disclosure. An attacker could exploit this flaw to access sensitive data.
- CVE-2021-36968High
Elevation of privilege vulnerability in Windows DNS. An attacker could exploit it to gain higher privileges on the system.

