CVE-2026-88114
HighCVSS 8.8Summary
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
Risk Assessment
An unauthenticated attacker with network access could execute arbitrary code on the DNS server, potentially leading to system compromise and DNS traffic redirection.
Recommendation
Install the latest Microsoft security update for the DNS Server service and restrict access to trusted clients only.
Other vulnerabilities in DNS Server
See all- CVE-2026-88116High
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-88112High
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-85903High
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-96113Critical
A heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. The vulnerability stems from improper memory handling during DNS query processing.
- CVE-2026-83869Critical
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2016-3227Critical
A use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests.
- CVE-2026-69989High
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-69827High
Concurrent execution using shared resource with improper synchronization ('race condition') in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-69782High
Race condition in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-50426Medium
Relative path traversal vulnerability in DNS Server allows an authorized attacker to execute code over an adjacent network.
Original NVD description (English source)
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS