{"id":"CVE-2026-61920","revision":"da3bb02531434e08bf48b0b33ee2d534","records":[{"revision":"da3bb02531434e08bf48b0b33ee2d534","observedAt":"2026-10-28T21:55:13.262+00:00","statement":{"source":"cve-program","id":"CVE-2026-61920","aliases":[],"title":"Windows DNS Server Remote Code Execution Vulnerability","description":"Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.","state":0,"publishedAt":"2026-08-11T17:05:50.971+00:00","modifiedAt":"2026-10-28T20:07:18.32+00:00","affected":[{"ecosystem":"Vendor product","name":"Windows Server 2012 R2","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2012 R2\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.3.9600.0\",\n                            \"lessThan\": \"6.3.9600.23338\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2012 R2 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2012 R2 (Server Core installation)\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.3.9600.0\",\n                            \"lessThan\": \"6.3.9600.23338\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2016","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2016\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.14393.0\",\n                            \"lessThan\": \"10.0.14393.9418\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2016 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2016 (Server Core installation)\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.14393.0\",\n                            \"lessThan\": \"10.0.14393.9418\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2019","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2019\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.17763.0\",\n                            \"lessThan\": \"10.0.17763.9121\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2019 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2019 (Server Core installation)\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.17763.0\",\n                            \"lessThan\": \"10.0.17763.9121\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2022","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2022\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.20348.0\",\n                            \"lessThan\": \"10.0.20348.5499\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2025","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2025\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.26100.0\",\n                            \"lessThan\": \"10.0.26100.33296\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2025 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2025 (Server Core installation)\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.26100.0\",\n                            \"lessThan\": \"10.0.26100.33296\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","score":6.6,"severity":"MEDIUM"}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-61920"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-61920","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-61920","identifiers":["CVE-2026-61920"]},"retained":false,"historicalAffected":[]}],"coverage":[]}