DNS server
by Microsoft
CVEs (6)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-77505 | Hig | 0.53 | 8.1 | 0.01 | Sep 8, 2026 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69989 | Hig | 0.53 | 8.1 | 0.01 | Sep 8, 2026 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69827 | Hig | 0.53 | 8.1 | 0.01 | Sep 8, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69782 | Hig | 0.53 | 8.1 | 0.01 | Sep 8, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2025-24064 | Hig | 0.53 | 8.1 | 0.01 | Mar 11, 2025 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2007-3898 | 0.07 | — | 0.52 | Nov 14, 2007 | The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors. |
- risk 0.53cvss 8.1epss 0.01
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
- risk 0.53cvss 8.1epss 0.01
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
- risk 0.53cvss 8.1epss 0.01
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
- risk 0.53cvss 8.1epss 0.01
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
- risk 0.53cvss 8.1epss 0.01
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2007-3898Nov 14, 2007risk 0.07cvss —epss 0.52
The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors.