Windows DNS Server Remote Code Execution Vulnerability

Summary

Details

Vulnerabilities 1

• High 8.0
  CVE-2026-49169

  Windows DNS Server Remote Code Execution Vulnerability

  Use after free in DNS Server allows an authorized attacker to execute code over a network.

  Microsoft Windows Server 2025 Windows Server 2025 (Server Core installation) Windows
  Jul 14, 2026

Revision history

1. 2026-07-14 #1

   Information published.

References

• CVE-2026-49169 Windows DNS Server Remote Code Execution Vulnerability - HTML
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49169
• Microsoft Exploitability Index
  https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
• Microsoft Support Lifecycle
  https://support.microsoft.com/lifecycle
• Common Vulnerability Scoring System
  https://www.first.org/cvss