{"id":"CVE-2026-83889","published":"2026-10-13T19:20:39.917","lastModified":"2026-10-16T16:21:42.920","description":"Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-763"],"vendors":["microsoft"],"products":["windows 10 1607","windows 10 1809","windows 10 21h2","windows 10 22h2","windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2012","windows server 2016","windows server 2019"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83889","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability is a memory safety issue in Microsoft's DNS Server where releasing an invalid pointer can lead to arbitrary code execution. This allows authenticated attackers to gain full control over affected systems.","exploitability":"Exploitation requires an authenticated attacker with network access to the DNS server, making it moderately difficult but not highly complex to exploit.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on DNS servers across Windows 10 and 11 versions, potentially leading to full domain compromise.","remediation":"Apply the Microsoft security update KB5042873 for Windows 10 1607, Windows 10 1809, Windows 10 21H2, Windows 10 22H2, Windows 11 23H2, Windows 11 24H2, and Windows 11 25H2.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dns","memory-safety","rce"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:59:39.932Z"}}