Summary
Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
Details
According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?
An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.
What is the nature of the spoofing?
An attacker who controls a signed DNS zone could cause an affected DNS server to accept forged DNS records for a different zone as valid. This could cause clients to trust DNS data that did not originate from the authoritative zone.
Security updates
10.0.17763.9245 — https://support.microsoft.com/help/5122876
10.0.20348.5622 — https://support.microsoft.com/help/5122882
10.0.26100.33438 — https://support.microsoft.com/help/5122871
10.0.14393.9512 — https://support.microsoft.com/help/5123099
6.2.9200.26349 — https://support.microsoft.com/help/5123065
6.3.9600.23398 — https://support.microsoft.com/help/5123066
Vulnerabilities 1
-
High 8.1
Windows DNS Spoofing Vulnerability
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network.
Revision history
-
#1
Information published.
References
-
CVE-2026-69680 Windows DNS Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69680
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss