CVE-2026-88116

8.8 HIGH

Published 2026-10-13 · Updated 2026-10-16

AI risk analysis

Summary: A DNS Server vulnerability allows attackers to execute arbitrary code remotely through an untrusted pointer dereference, potentially leading to full system compromise.
Exploitability: Exploitation requires a network-based attack with minimal preconditions, making it relatively easy to exploit in exposed environments.
Blast radius: The flaw affects multiple Windows versions including 10 and 11, potentially allowing attackers to gain full control over affected systems with high impact across enterprise networks.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Apply the Microsoft security update KB5042847 for Windows 10 1607, Windows 10 1809, Windows 10 21H2, Windows 10 22H2, Windows 11 23H2, Windows 11 24H2, and Windows 11 25H2.

rcednsremote

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-822

Vendors

microsoft

Products

windows 10 1607, windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 23h2, windows 11 24h2, windows 11 25h2, windows 11 26h1, windows 11 26h2, windows server 2016, windows server 2019, windows server 2022

All references

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88116

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.