CVE-2026-85903
HighCVSS 8.8Summary
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
Risk Assessment
This flaw is especially dangerous because it can be exploited remotely without authentication, potentially leading to DNS server takeover and disruption of network services.
Recommendation
Install security updates for DNS Server as soon as possible and restrict network access to the DNS service from untrusted networks.
Other vulnerabilities in DNS Server
See all- CVE-2026-88116High
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-88114High
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-88112High
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-83889High
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
- CVE-2026-83642High
Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-83635High
Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.
- CVE-2026-70167High
Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.
- CVE-2026-70127High
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-96113Critical
A heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. The vulnerability stems from improper memory handling during DNS query processing.
- CVE-2026-83869Critical
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS