CVE-2026-83889
8.8 HIGHPublished 2026-10-13 · Updated 2026-10-16
AI risk analysis
- Summary
- This vulnerability is a memory safety issue in Microsoft's DNS Server where releasing an invalid pointer can lead to arbitrary code execution. This allows authenticated attackers to gain full control over affected systems.
- Exploitability
- Exploitation requires an authenticated attacker with network access to the DNS server, making it moderately difficult but not highly complex to exploit.
- Blast radius
- If exploited, this vulnerability could allow attackers to execute arbitrary code on DNS servers across Windows 10 and 11 versions, potentially leading to full domain compromise.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Apply the Microsoft security update KB5042873 for Windows 10 1607, Windows 10 1809, Windows 10 21H2, Windows 10 22H2, Windows 11 23H2, Windows 11 24H2, and Windows 11 25H2.
dnsmemory-safetyrce
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-763
Vendors
microsoft
Products
windows 10 1607, windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 23h2, windows 11 24h2, windows 11 25h2, windows 11 26h1, windows 11 26h2, windows server 2012, windows server 2016, windows server 2019
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-105595
- HIGHCVE-2026-12268
- HIGHCVE-2026-70167
- CRITICALCVE-2026-81642
- HIGHCVE-2026-83642
- CRITICALCVE-2026-83869
- HIGHCVE-2026-85903
- HIGHCVE-2026-88112
Related by shared AI tags and CWE weakness class. Browse the full archive.