Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 7 products
🛡️ Windows DNS has a critical use-after-free RCE: attackers may need no login, just a crafted network packet. DNS is supposed to answer queries, not hand out the keys—patch it now. https://windowsforum.com/news/cve-2026-72987-windows-dns-remote-code-execution-vulnerability.447832/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftSecurity #Msrc #Cve202672987 https://t.co/wJD92ePqGh
10 of 10 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_10_1607 | - | - | x64 |
| OS | microsoft | windows_10_1607 | - | - | x86 |
| OS | microsoft | windows_10_1809 | - | - | x64 |
| OS | microsoft | windows_10_1809 | - | - | x86 |
| OS | microsoft | windows_server_2012 | - | - | - |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_server_2016 | - | - | x64 |
| OS | microsoft | windows_server_2019 | - | - | x64 |
| OS | microsoft | windows_server_2022 | - | - | x64 |
| OS | microsoft | windows_server_2025 | - | - | x64 |