CVE-2026-70091
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.
Risk Assessment
Risk of DNS service disruption, potentially affecting network operations.
Recommendation
Apply Windows security patches.
Other vulnerabilities in Windows DNS
See all- CVE-2026-69730Critical
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-62878Critical
A stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-70166Medium
Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.
- CVE-2026-70155High
Missing release of memory after effective lifetime in Windows DNS. An unauthorized attacker can exploit this to cause a denial of service over a network.
- CVE-2026-70119Medium
Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.
- CVE-2026-70082High
Uncaught exception in Windows DNS. An unauthorized attacker can deny service over a network.
- CVE-2026-70079High
Improper enforcement of behavioral workflow in Windows DNS. An unauthorized attacker can deny service over a network.
- CVE-2026-70074Medium
Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.
- CVE-2026-78523Medium
A use-after-free vulnerability in Windows DNS allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-72987High
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS