CVE-2025-24064

published 2025-03-11

CVE-2025-24064: Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

high 8.1 CVSS 3.1

AV N AC H PR N UI N S U C H I H A H

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Affected

27 ranges · showing 25

Vendor	Product	Version range	Fixed in
microsoft	windows_server_2008	—	—
microsoft	windows_server_2008_r2_service_pack_1	>= 6.1.7601.0 < 6.1.7601.27618	6.1.7601.27618
microsoft	windows_server_2008_service_pack_2	>= 6.0.6003.0 < 6.0.6003.23168	6.0.6003.23168
microsoft	windows_server_2012	—	—
microsoft	windows_server_2012	>= 6.2.9200.0 < 6.2.9200.25368	6.2.9200.25368
microsoft	windows_server_2012_r2	>= 6.3.9600.0 < 6.3.9600.22470	6.3.9600.22470
microsoft	windows_server_2016	< 10.0.14393.7876	10.0.14393.7876
microsoft	windows_server_2016	>= 10.0.14393.0 < 10.0.14393.7876	10.0.14393.7876
microsoft	windows_server_2019	< 10.0.17763.7009	10.0.17763.7009
microsoft	windows_server_2019	>= 10.0.17763.0 < 10.0.17763.7009	10.0.17763.7009
microsoft	windows_server_2022	< 10.0.20348.3270	10.0.20348.3270
microsoft	windows_server_2022	< 10.0.20348.3328	10.0.20348.3328
microsoft	windows_server_2022	>= 10.0.20348.0 < 10.0.20348.3328	10.0.20348.3328
microsoft	windows_server_2022_23h2	< 10.0.25398.1486	10.0.25398.1486
microsoft	windows_server_2025	< 10.0.26100.3403	10.0.26100.3403
microsoft	windows_server_2025	< 10.0.26100.3476	10.0.26100.3476
microsoft	windows_server_2025	>= 10.0.26100.0 < 10.0.26100.3476	10.0.26100.3476
msrc	windows_server_2008_for_32-bit_systems_service_pack_2	—	—
msrc	windows_server_2008_for_x64-based_systems_service_pack_2	—	—
msrc	windows_server_2008_r2_for_x64-based_systems_service_pack_1	—	—
msrc	windows_server_2012	—	—
msrc	windows_server_2012_r2	—	—
msrc	windows_server_2016	—	—
msrc	windows_server_2019	—	—
msrc	windows_server_2022	—	—

CWE-416