CVE-2026-62769
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.7
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
- EPSS probability
- 0.33%
- CWE
- CWE-197, CWE-122
- Published
- 2026-08-11
- Last modified
- 2026-09-16
Affected products
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 23H2
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
Weakness type
Related vulnerabilities
- CVE-2022-42475 — A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0
- CVE-2026-87529 — Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execu
- CVE-2020-15202 — Integer truncation in Shard API usage
- CVE-2023-32143 — D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability
- CVE-2022-34670 — NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged reg
- CVE-2025-6965 — Integer Truncation on SQLite
- CVE-2026-6679 — DTLS 1.3 ACK serialization heap buffer overflow via integer truncation
- CVE-2026-42944 — Heap overflow with multiple NSID, COOKIE, PADDING EDNS options