Skip to content
OpenAdvisories
Critical MSRC-CVE-2025-24064 1 CVE

Windows Domain Name Service Remote Code Execution Vulnerability

Published Mar 11, 2025 · Updated Mar 11, 2025

Summary

Impact: Remote Code Execution. Microsoft rating: Critical. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.

How could an attacker exploit this vulnerability?
In a network-based attack an attacker sending a dynamic DNS update message with perfect timing to a DNS server could potentially execute code remotely on the target server.

Security updates
10.0.17763.7009 — https://support.microsoft.com/help/5053596
10.0.20348.3328 — https://support.microsoft.com/help/5053603
10.0.20348.3270 — https://support.microsoft.com/help/5053638
10.0.26100.3476 — https://support.microsoft.com/help/5053598
10.0.26100.3403 — https://support.microsoft.com/help/5053636
10.0.25398.1486 — https://support.microsoft.com/help/5053599
10.0.14393.7876 — https://support.microsoft.com/help/5053594
6.0.6003.23168 — https://support.microsoft.com/help/5053888
6.0.6003.23168 — https://support.microsoft.com/help/5053995
6.1.7601.27618 — https://support.microsoft.com/help/5053620
6.1.7601.27618 — https://support.microsoft.com/help/5053627
6.2.9200.25368 — https://support.microsoft.com/help/5053886
6.3.9600.22470 — https://support.microsoft.com/help/5053887

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References