← Database

CVE-2026-61920

MEDIUM CVSS: 6.6 Published: 2026-08-11 Modified: 2026-08-17

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.

Affected Platforms

Microsoft Windows Server 2016Microsoft Windows Server 2019Microsoft Windows Server 2025Microsoft Windows Server 2022Microsoft Windows 10 1809Microsoft Windows Server 2012Microsoft Windows 10 1607Microsoft Windows 11 26H1

Weakness Type

CWE-362, CWE-416

References