CVE-2026-62820 – Windows DNS Server Remote Code Execution Vulnerability
CVSS 8.1
IMPORTANT
2 Critical – Same Day Deployment
“This DNS flaw can turn a race condition into remote code execution, giving an unauthenticated attacker a path to compromise a critical network service.”
CVE-2026-62820 is a remote code execution vulnerability in Windows DNS Server caused by improper synchronization during concurrent access to a shared resource. An unauthenticated attacker could send a specially crafted packet to an affected DNS service over the network and potentially execute code on the target system. Successful exploitation requires the attacker to win a race condition, which increases attack complexity.
Key Details
- Affected Product
- Microsoft Windows 10 1607
- Attack Vector
- Network
- Attack Complexity
- High
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-362
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.