What is the CVSS score of CVE-2026-69782?

CVE-2026-69782 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.6%.

Which versions of Windows DNS Server are affected by CVE-2026-69782?

Windows DNS Server across all actively supported versions is vulnerable to unauthenticated remote code execution through a race-condition flaw affecting concurrent DNS request processing.. A patch is available.

How to fix or mitigate CVE-2026-69782?

Within 24 hours: execute comprehensive asset discovery to identify all actively supported Windows Server DNS deployments in your environment. Within 7 days: obtain and validate the vendor patch in a staging environment with realistic DNS traffic, establishing a phased deployment plan to minimize service interruption by staggering updates across redundant DNS servers. Within 30 days: deploy the patch production-wide to all DNS-enabled servers, with post-deployment validation of DNS resolution and service health. While no public exploit code has been identified, treat this as priority maintenance given the ubiquity of Windows DNS and the critical nature of the service.

Windows DNS Server CVE-2026-69782

EUVD-2026-73172 HIGH

Race Condition (CWE-362)

2026-09-08 secure@microsoft.com

GHSA-2rch-rh42-gwq8

Race Condition

8.1

CVSS 3.1 · Vendor: microsoft

Severity by source

Vendor (microsoft) PRIMARY

8.1 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.1 HIGH

DNS is network-exposed (AV:N); race condition timing constraint justifies AC:H; unauthorized attacker requires no privileges (PR:N); full C/I/A for RCE.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (microsoft).

CVSS VectorVendor: microsoft

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Metadata Corrected

Sep 09, 2026 - 01:40 vuln.today

tag: Authentication Bypass removed

Analysis Generated

Sep 09, 2026 - 01:03 vuln.today

Patch available

Sep 08, 2026 - 18:35 EUVD

CVE Published

Sep 08, 2026 - 18:19 nvd

HIGH 8.1

DescriptionCVE.org

Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.

AnalysisAI

Remote code execution in the Windows DNS Server component allows unauthenticated network attackers to exploit a race condition in concurrent DNS request processing. The CWE-362 flaw affects every actively supported Windows Server release from Server 2012 through Server 2025, with full confidentiality, integrity, and availability impact if exploited. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Delivery

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	The Windows DNS Server service (dns.exe) must be running and reachable on TCP/UDP port 53 - this is the default state of any Windows Server promoted as a DNS server, including Active Directory domain controllers. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 8.1 score (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) accurately captures the dual nature of this finding: catastrophic potential impact paired with high exploitation complexity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Vendor-released patches are available: apply Windows Update or WSUS patches to advance each affected platform to its respective fixed build - Server 2025 to 10.0.26100.33438, Server 2022 to 10.0.20348.5622, Server 2019/Windows 10 1809 to 10.0.17763.9245, Server 2016/Windows 10 1607 to 10.0.14393.9512, Server 2012 R2 to 6.3.9600.23397, and Server 2012 to 6.2.9200.26349. … Detailed patch versions, workarounds, and compensating controls in full report.