CVE WatchAug 11, 2026

CVE-2026-62820

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker t

CVSS

8.1

High

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Aug 11, 2026 · Last modified: Aug 11, 2026 · CWE-362

EPSS · 30d

Not enough EPSS history yet.

Technical description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62820

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-668028.1 HIG

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code over a network.6h CVE-2026-629087.0 HIG

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.6h CVE-2026-627807.0 HIG

—

———Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.6h CVE-2026-627788.1 HIG

—

———Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.6h CVE-2026-627487.0 HIG

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.6h CVE-2026-627347.0 HIG

—

———Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.6h