CVE-2026-88116
8.8HighPublished 13 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
- Impact
- Full C/I/A compromise
- Weakness
- CWE-822
Impact
Remote attackers can execute arbitrary code on the DNS Server by tricking a user into interacting with a malicious target. An unauthenticated attacker needs network reachability and user interaction to trigger the exploit.
Root cause
An untrusted pointer dereference allows invalid memory access during DNS query processing.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Fix & remediation
Install the security update from Microsoft via Windows Update or the Microsoft Update Catalog; if patching cannot happen immediately, restrict inbound access to the DNS Server service (port 53 TCP/UDP) to trusted clients only.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.