PT-2026-87686 · Microsoft · Windows+10

CVE-2026-69730

·

Published

2026-09-08

·

Updated

2026-09-12

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
🚨Critical - Windows DNS Server Remote Code Execution via Use-After-Free (CVE-2026-69730)
A use-after-free in the Windows DNS Server service (DNS.exe) can be triggered remotely by sending crafted DNS requests over the network, corrupting memory and leading to arbitrary code execution as SYSTEM. Clients/resolvers not running the DNS Server role are not impacted.
👉Affected: Microsoft Windows DNS Server (multiple Windows/Windows Server versions)

Fix

RCE

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-14531
CVE-2026-69730

Affected Products

Windows
Windows 10 1607
Windows 10 1809
Windows 10 Version 1607
Windows 10 Version 1809
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019
Windows Server 2022
Windows Server 2025