CRITICAL 9.8 Microsoft

CVE-2026-62878

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Security Update 2026-Aug: Windows DNS Server Remote Code Execution Vulnerability

Affected Products

Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for x64-based Systems
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2025 (Server Core installation)
Windows Server 2025

References

Published: 2026-08-11 · Source: Microsoft · Feed updated: 2026-08-11

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-08-11 via Microsoft. Affected: Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 5 more.

Risk Timeline

CVE Disclosed2026-08-11 · -1 days ago

Remediation Resources

Official Advisory

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62878

NVD / MITRE

nvd.nist.gov/vuln/detail/CVE-2026-62878

Related Vulnerabilities

CVE	Title	Severity	CVSS
CVE-2026-57092	Microsoft Windows VMSwitch Elevation of Privilege Vulnerability	CRITICAL	9.9
CVE-2026-59124	Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerabil	CRITICAL	9.8
CVE-2026-62815	Microsoft QUIC Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2026-62893	Windows Deployment Services TFTP Server Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2026-65791	Windows iSCSI Target Service Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2025-21298 PoC	Windows OLE Remote Code Execution Vulnerability	CRITICAL	9.8

vulnfeed aggregates 9844 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.