Skip to content
9.8 Critical

CVE-2021-26897 Windows DNS Server Remote Code Execution Vulnerability

Description

Windows DNS Server Remote Code Execution Vulnerability

Affected products and versions

Product Affected versions Fixed in
Windows Server version 20H2 10.0 10.0.0 → < 10.0.19043.867 10.0.19043.867
Windows Server 2019 10.0 10.0.17763.0 → < 10.0.17763.1817 10.0.17763.1817
Windows Server 2019 (Server Core installation) 10.0 10.0.17763.0 → < 10.0.17763.1817 10.0.17763.1817
Windows Server, version 1909 (Server Core installation) 10.0 10.0.0 → < 10.0.18363.1440 10.0.18363.1440
Windows Server version 2004 10.0 10.0.0 → < 10.0.19043.867 10.0.19043.867
Windows Server 2016 10.0 10.0.14393.0 → < 10.0.14393.4283 10.0.14393.4283
Windows Server 2016 (Server Core installation) 10.0 10.0.14393.0 → < 10.0.14393.4283 10.0.14393.4283
Windows Server 2008 Service Pack 2 6.0 6.0.6003.0 → < 6.0.6003.21070 6.0.6003.21070
Windows Server 2008 Service Pack 2 (Server Core installation) 6.0 6.0.6003.0 → < 6.0.6003.21070 6.0.6003.21070
Show the 7 other branches
Product Affected versions Fixed in
Windows Server 2008 Service Pack 2 6.0 6.0.0 → latest No fix stated
Windows Server 2008 R2 Service Pack 1 6.1 6.1.7601.0 → < 6.1.7601.24566 6.1.7601.24566
Windows Server 2008 R2 Service Pack 1 (Server Core installation) 6.1 6.1.7601.0 → < 6.1.7601.24566 6.1.7601.24566
Windows Server 2012 6.2 6.2.9200.0 → < 6.2.9200.23298 6.2.9200.23298
Windows Server 2012 (Server Core installation) 6.2 6.2.9200.0 → < 6.2.9200.23298 6.2.9200.23298
Windows Server 2012 R2 6.3 6.3.9600.0 → < 6.3.9600.19968 6.3.9600.19968
Windows Server 2012 R2 (Server Core installation) 6.3 6.3.9600.0 → < 6.3.9600.19968 6.3.9600.19968

References

Timeline

  1. Published
  2. Last modified
The 966 CVEs of Windows Server version 20H2 →
Track this CVE