PT-2026-58144 · Microsoft · Windows Server 2025

Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-49169

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Server 2025 DNS (affected versions not specified)

Description A use-after-free condition in the DNS Server allows an authorized attacker to execute arbitrary code over a network. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed, which can be exploited to redirect program execution.

Recommendations Apply the security patch for Windows Server 2025 DNS.

Fix

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-49169

Affected Products

Windows Server 2025

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-49169 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-49169 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-49169 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49169 · Vendor Advisory
• https://twitter.com/windowsforum/status/2077112437485056117 · Twitter Post