RCE in Windows DNS Server

Windows Domain Name System (DNS) servers have a remote code execution vulnerability when the server improperly handles a request, allowing arbitrary code to be run in the context of the Local System Account. An attacker may try and exploit this vulnerability by sending a malicious request that will not be handled properly. It is recommended that all users apply the latest update to address the vulnerability.


Relevant URL(s): https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8626