Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-72928

Опубликовано: 08 сент. 2026
Источник: msrc
CVSS3: 7.5
EPSS Низкий

Описание

Windows DNS Server Remote Code Execution Vulnerability

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

FAQ

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to win a race condition.

Обновления

ПродуктСтатьяОбновление
Windows Server 2025
Windows Server 2025 (Server Core installation)

Показывать по

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Less Likely

EPSS

Процентиль: 48%
0.00618
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
nvd
6 дней назад

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

CVSS3: 7.5
github
6 дней назад

Use after free in Windows DNS allows an authorized attacker to execute code over a network.

EPSS

Процентиль: 48%
0.00618
Низкий

7.5 High

CVSS3