{"id":"CVE-2026-88114","published":"2026-10-13T19:21:29.510","lastModified":"2026-10-16T16:22:31.010","description":"Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-822"],"vendors":["microsoft"],"products":["windows 10 1607","windows 10 1809","windows 10 21h2","windows 10 22h2","windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2016","windows server 2019","windows server 2022"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88114","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A pointer dereference vulnerability in Microsoft's DNS Server allows remote attackers to execute arbitrary code when processing DNS queries. This represents a critical security flaw that can be exploited without authentication over the network.","exploitability":"Exploitation is relatively straightforward requiring only network access to send specially crafted DNS queries, with no authentication required and minimal preconditions.","blast_radius":"The vulnerability affects multiple Windows versions including Windows 10 and 11, potentially allowing attackers to compromise a large number of endpoints that have DNS server functionality enabled.","remediation":"Apply the Microsoft security update KB5043628 for Windows 10 version 1607, Windows 10 version 1809, Windows 10 version 21H2, Windows 10 version 22H2, Windows 11 version 23H2, Windows 11 version 24H2, and Windows 11 version 25H2.","detection":"Monitor for unusual DNS query patterns or malformed DNS responses in network traffic logs, particularly looking for DNS server process crashes or abnormal memory usage patterns in DNS Server service logs.","tags":["dns","rce","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:01:49.067Z"}}