{"id":"CVE-2026-83642","published":"2026-10-13T19:20:04.920","lastModified":"2026-10-16T16:21:11.580","description":"Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-843"],"vendors":["microsoft"],"products":["windows 10 1607","windows 10 1809","windows 10 21h2","windows 10 22h2","windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2012","windows server 2016","windows server 2019"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83642","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A type confusion vulnerability in Microsoft's DNS Server allows attackers to execute arbitrary code remotely by exploiting an incompatible resource access pattern. This flaw is particularly concerning because it affects multiple Windows versions and can be triggered over the network without authentication.","exploitability":"Exploitation appears moderately difficult as it requires crafting a specific DNS query that triggers the type confusion, but no public exploit exists yet and the attack surface is limited to DNS server endpoints with specific configurations.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full control over affected DNS servers, potentially leading to widespread network disruption, data exfiltration, or lateral movement within the compromised environment.","remediation":"Apply the Microsoft security update KB5040389 for Windows 10 version 1607, Windows 10 version 1809, Windows 10 version 21H2, Windows 10 version 22H2, Windows 11 version 23H2, Windows 11 version 24H2, and Windows 11 version 25H2.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","dns","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:58:05.902Z"}}