Executive brief
Windows DNS Server is a critical component that translates domain names to IP addresses for enterprise networks. A use-after-free vulnerability allows an authorized local attacker to execute arbitrary code with elevated privileges, potentially compromising domain name resolution and enabling lateral movement across the network.
Technical details
A use-after-free vulnerability exists in the Windows DNS service component. An authenticated local attacker can trigger the vulnerability to escalate privileges from a standard user to SYSTEM or administrator level. The attack requires local access to the affected system. Once exploited, an attacker can execute arbitrary code with elevated privileges, potentially leading to full system compromise. Microsoft has released security updates to address this vulnerability.
Affected products
- Microsoft Windows DNS <UNKNOWN>
Timeline
- 2026-09-08: disclosed