CVE-2026-69730
CRITICAL · 9.8 EPSS 1.1%Critical vuln with real vector but KEV absence, conflation with other CVEs, and no isolated PoC signal clouds immediate threat picture.
What: Use-after-free in Windows DNS enabling remote code execution (CVSS 9.8 CRITICAL). Affects Windows systems including version 1607.
Why it matters: Critical severity and network-exploitable RCE vector warrant immediate patching. However, CVE not yet KEV-listed; first post conflates this with two other CVEs (CVE-2026-81963, CVE-2026-85880) reportedly exploited in-the-wild, creating attribution confusion. No confirmed PoC or active exploitation signal for CVE-2026-69730 itself isolated from the noise.
Where it's seen: Security researcher and threat intel social posts aggregating Patch Tuesday disclosures. Posts emphasize severity but lack independent exploitation confirmation. One post references suspicious third-party CVE tracker site.
RISK: HIGH — CVSS 9.8 RCE in widely-deployed DNS; lack of KEV-listing suggests no confirmed active exploitation yet.
Description
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVSS 3.1 breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H- Attack vector
- Network
- Complexity
- Low
- Privileges required
- None
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High