CVE-2026-69730

What is CVE-2026-69730?

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.

Timeline

• 2026-09-08Published to the U.S. National Vulnerability Database (NVD)
• 2026-09-17First covered in a defend.network daily briefing
• 2026-09-24NVD record last updated

Affected product

Microsoft Windows

NVD also lists CPE entries for: Microsoft Windows 10 1607, Microsoft Windows 10 1809, Microsoft Windows Server 2012, Microsoft Windows Server 2016, Microsoft Windows Server 2019

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69730
• https://nvd.nist.gov/vuln/detail/CVE-2026-69730

Referenced in our briefings & reports

• Microsoft, Fortra vulnerabilities patched; Warlock escalates SharePoint attacks on critical infrastructure (2026-10-04)
• Fortinet FortiMail zero-day exploited; KillSec ransomware leadership dismantled (2026-10-02)
• Apple zero-day, Microsoft mega-patch (974 CVEs), ShinyHunters Oracle escalation (2026-09-29)
• Oracle PeopleSoft, Microsoft patches, Elementor RCE under active exploitation (2026-09-27)
• Microsoft’s record patch batch; fake LastPass installer deploys kernel EDR killer (2026-09-22)
• Microsoft patches 974 CVEs; Check Point RCE; Docker Sandboxes escape on macOS (2026-09-18)
• Issabel RCE under active exploitation; Microsoft patches 974 CVEs; browser AI assistants hijacked (2026-09-17)

Related vulnerabilities

• CVE-2026-56155 – Microsoft Active Directory Federation Services (same product)
• CVE-2026-85880 – Microsoft Windows (same product)
• CVE-2026-41089 – Microsoft Windows Server (same product)
• CVE-2026-68820 – Microsoft Windows Ancillary Function Driver For WinSock (same product)
• CVE-2026-96951 – Microsoft Windows (same product)
• CVE-2026-69829 – Microsoft Windows (same product)

Microsoft: 390 known exploited vulnerabilities (CISA KEV) →