October 26, 2026

CyberWorldOps Cyber Security · Threat Intelligence · CVE

CVE-2026-69730

Critical9.8 Published on Sep 8, 2026

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

CVSS score9.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-416

Vendorsmicrosoft

Affected products

Vendors	Product	Versions
microsoft	windows 10 1607	< 10.0.14393.9512
microsoft	windows 10 1809	< 10.0.17763.9245
microsoft	windows server 2012	-
microsoft	windows server 2016	< 10.0.14393.9512
microsoft	windows server 2019	< 10.0.17763.9245
microsoft	windows server 2022	< 10.0.20348.5622
microsoft	windows server 2025	< 10.0.26100.33438

Related articles

Microsoft’s 974-Fix Security Release Forces a Triage Test for Windows Defenders

Vulnerabilities

Microsoft’s 974-Fix Security Release Forces a Triage Test for Windows Defenders

Microsoft patched 974 flaws in September, including two exploited privilege-escalation bugs and two 9.8-rated RCEs requiring urgent triage.

Sep 22, 202605:58 6 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.