Multiple Race Condition Vulnerabilities in Windows Products Identified
Article Content
- •CVE-2026-61920 allows remote code execution via Windows DNS.
- •CVE-2026-77894 enables local privilege escalation in Windows Installer.
- •Both vulnerabilities require successful exploitation of race conditions.
Two critical vulnerabilities, CVE-2026-61920 and CVE-2026-77894, have been disclosed by Microsoft. CVE-2026-61920 affects Windows DNS, allowing attackers to execute code over a network through a race condition, while CVE-2026-77894 impacts Windows Installer, enabling local privilege escalation to SYSTEM. Both vulnerabilities have high attack complexity, requiring attackers to exploit race conditions successfully. The vulnerabilities were released on August 11 and September 8, 2026, respectively. Microsoft has updated its advisory to clarify that CVE-2026-61920 only affects Windows Servers. Security professionals are advised to monitor for potential exploitation attempts and apply relevant patches as they become available.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (10)
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…