PT-2026-87686 · Microsoft · Windows+10

CVE-2026-69730

·

Publicado

2026-09-08

·

Atualizado

2026-09-11

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
🚨Critical - Windows DNS Server Remote Code Execution via Use-After-Free (CVE-2026-69730)
A use-after-free in the Windows DNS Server service (DNS.exe) can be triggered remotely by sending crafted DNS requests over the network, corrupting memory and leading to arbitrary code execution as SYSTEM. Clients/resolvers not running the DNS Server role are not impacted.
👉Affected: Microsoft Windows DNS Server (multiple Windows/Windows Server versions)

Correção

RCE

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2026-14531
CVE-2026-69730

Produtos afetados

Windows
Windows 10 1607
Windows 10 1809
Windows 10 Version 1607
Windows 10 Version 1809
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019
Windows Server 2022
Windows Server 2025