CVE-2026-83869
9.8 CRITICALPublished 2026-10-13 · Updated 2026-10-16
AI risk analysis
- Summary
- A DNS server vulnerability allows unauthorized attackers to execute code remotely through integer underflow, potentially leading to full system compromise.
- Exploitability
- Exploitation appears straightforward with no special preconditions required, as the vulnerability affects network-based DNS services.
- Blast radius
- The impact could be severe across all systems relying on vulnerable DNS servers, potentially allowing attackers to gain complete control over affected infrastructure.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- No fixed version is published. Disable the affected DNS service or restrict access to the named endpoint until a patch is available.
dnsrcenetwork
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-191
Vendors
microsoft
Products
windows 10 1607, windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 23h2, windows 11 24h2, windows 11 25h2, windows 11 26h1, windows 11 26h2, windows server 2012, windows server 2016, windows server 2019
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-83642
- HIGHCVE-2026-85903
- HIGHCVE-2026-88112
- HIGHCVE-2026-88114
- CRITICALCVE-2026-96113
- CRITICALCVE-2026-100222
- CRITICALCVE-2026-85806
- CRITICALCVE-2017-20242
Related by shared AI tags and CWE weakness class. Browse the full archive.