CVE-2026-97833
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
An out-of-bounds read vulnerability in the DNS Server allows an authorized attacker to disclose information over a network.
Risk Assessment
The risk involves potential leakage of sensitive data from the system, which could compromise the confidentiality and integrity of organizational information.
Recommendation
It is recommended to apply vendor-provided patches immediately and monitor network traffic for anomalies.
Other vulnerabilities in DNS Server
See all- CVE-2026-96113Critical
A heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. The vulnerability stems from improper memory handling during DNS query processing.
- CVE-2026-83869Critical
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2016-3227Critical
A use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests.
- CVE-2026-97844Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97843Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97842Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97841Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97840Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97839Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97838Medium
An out-of-bounds read vulnerability in the DNS Server allows an authorized attacker to disclose information over a network.
Original NVD description (English source)
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS