<< Back
CVE Number Vulnerability Product Severity Date
CVE-2024-26221 Windows DNS Server Remote Code Execution Vulnerability Windows Server Important 23-04-2024

Technical Information

A privileged attacker with the query access to the DNS may perform network based attack and if the timing of DNS queries is perfect, attacker may be able to execute code remotely on the target server.

Patch release date: Apr 09, 2024
Further information on this vulnerability is available at : CVE-2024-26221

All the mentioned vulnerabilities are reported in the same windows DNS server and may have similar impact.

CVE-2024-26222:
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-26222

CVE-2024-26223:
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-26223

CVE-2024-26224:
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-26224

CVE-2024-26227:
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-26227

CVE-2024-26231:
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-26231

CVE-2024-26233:
https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-26233

Affected Software

Windows Server 2019,
Windows Server 2019 (Server Core installation),
Windows Server 2022,
Windows Server 2022 (Server Core installation),
Windows Server 2022, 23H2 Edition (Server Core installation),
Windows Server 2016,
Windows Server 2016 (Server Core installation)