CVE-2026-69730 – Windows DNS Server Remote Code Execution Vulnerability

CVSS 9.8 CRITICAL Critical - Same Day Deployment

"A single malicious network packet could turn a vulnerable DNS service into a path for remote code execution."

CVE-2026-69730 is a critical use-after-free vulnerability in Windows DNS that can allow an unauthenticated remote attacker to execute code on an affected system. Exploitation can be performed over the network with low attack complexity by sending a specially crafted packet to an affected service. No privileges or user interaction are required.

Key Details

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
CWE Classification
CWE-416
Patch this CVE on all your endpoints in under 5 minutes. First 200 endpoints are free forever, scale as needed.