{"schema_version":1,"title":"Microsoft DNS Server vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 29 vulnerabilities in Microsoft DNS Server: 29 in the last 7 days and 29 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-97840, was published on 13 October 2026. 29 vulnerabilities in the last four weeks, up from none in the four before. 1 critical against 0.","url":"https://junglewise.ai/threats/technologies/microsoft-dns-server","json_url":"https://junglewise.ai/threats/technologies/microsoft-dns-server.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/microsoft-dns-server","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":7,"all_time":29,"critical":1,"exploited":0,"last_7_days":29,"last_30_days":29,"last_90_days":29,"last_365_days":29},"latest":[{"cve":"CVE-2026-97840","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97840-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:24.29+00:00","url":"https://junglewise.ai/threats/cve-2026-97840-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97839","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97839-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:24.113+00:00","url":"https://junglewise.ai/threats/cve-2026-97839-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97838","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97838-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:23.933+00:00","url":"https://junglewise.ai/threats/cve-2026-97838-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97837","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97837-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:23.75+00:00","url":"https://junglewise.ai/threats/cve-2026-97837-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97836","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97836-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:23.573+00:00","url":"https://junglewise.ai/threats/cve-2026-97836-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97835","cvss":6.5,"epss":0.0073,"slug":"cve-2026-97835-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:23.4+00:00","url":"https://junglewise.ai/threats/cve-2026-97835-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97834","cvss":6.5,"epss":0.0055,"slug":"cve-2026-97834-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:23.22+00:00","url":"https://junglewise.ai/threats/cve-2026-97834-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97832","cvss":6.5,"epss":0.0055,"slug":"cve-2026-97832-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:22.863+00:00","url":"https://junglewise.ai/threats/cve-2026-97832-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97827","cvss":6.5,"epss":0.0077,"slug":"cve-2026-97827-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:21.993+00:00","url":"https://junglewise.ai/threats/cve-2026-97827-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97825","cvss":6.5,"epss":0.0077,"slug":"cve-2026-97825-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:21.65+00:00","url":"https://junglewise.ai/threats/cve-2026-97825-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97824","cvss":6.5,"epss":0.0077,"slug":"cve-2026-97824-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:21.463+00:00","url":"https://junglewise.ai/threats/cve-2026-97824-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97822","cvss":6.5,"epss":0.0074,"slug":"cve-2026-97822-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:20.98+00:00","url":"https://junglewise.ai/threats/cve-2026-97822-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97821","cvss":6.5,"epss":0.0074,"slug":"cve-2026-97821-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:20.803+00:00","url":"https://junglewise.ai/threats/cve-2026-97821-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-97820","cvss":6.5,"epss":0.0074,"slug":"cve-2026-97820-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read information disclosure","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:20.62+00:00","url":"https://junglewise.ai/threats/cve-2026-97820-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-96926","cvss":5.5,"epss":0.0029,"slug":"cve-2026-96926-missing-authorization-in-dns-server-allows-an-authorized-attacker","title":"Microsoft DNS Server missing authorization vulnerability","severity":"medium","exploited":false,"published_at":"2026-10-13T19:22:04.223+00:00","url":"https://junglewise.ai/threats/cve-2026-96926-missing-authorization-in-dns-server-allows-an-authorized-attacker"},{"cve":"CVE-2026-96113","cvss":9.8,"epss":0.0067,"slug":"cve-2026-96113-heap-based-buffer-overflow-in-dns-server-allows-an-unauthorized","title":"DNS Server heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:21:45.733+00:00","url":"https://junglewise.ai/threats/cve-2026-96113-heap-based-buffer-overflow-in-dns-server-allows-an-unauthorized"},{"cve":"CVE-2026-88130","cvss":6.5,"epss":0.0109,"slug":"cve-2026-88130-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read denial of service","severity":"medium","exploited":false,"published_at":"2026-10-13T19:21:32.173+00:00","url":"https://junglewise.ai/threats/cve-2026-88130-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-88129","cvss":6.5,"epss":0.0109,"slug":"cve-2026-88129-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:21:32.037+00:00","url":"https://junglewise.ai/threats/cve-2026-88129-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-88125","cvss":6.5,"epss":0.0109,"slug":"cve-2026-88125-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read denial of service","severity":"medium","exploited":false,"published_at":"2026-10-13T19:21:31.403+00:00","url":"https://junglewise.ai/threats/cve-2026-88125-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-88122","cvss":6.5,"epss":0.0079,"slug":"cve-2026-88122-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read denial of service","severity":"medium","exploited":false,"published_at":"2026-10-13T19:21:30.94+00:00","url":"https://junglewise.ai/threats/cve-2026-88122-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-88116","cvss":8.8,"epss":0.0056,"slug":"cve-2026-88116-untrusted-pointer-dereference-in-dns-server-allows-an","title":"Microsoft DNS Server untrusted pointer dereference","severity":"high","exploited":false,"published_at":"2026-10-13T19:21:29.937+00:00","url":"https://junglewise.ai/threats/cve-2026-88116-untrusted-pointer-dereference-in-dns-server-allows-an"},{"cve":"CVE-2026-88114","cvss":8.8,"epss":0.0056,"slug":"cve-2026-88114-untrusted-pointer-dereference-in-dns-server-allows-an","title":"Microsoft DNS Server untrusted pointer dereference","severity":"high","exploited":false,"published_at":"2026-10-13T19:21:29.51+00:00","url":"https://junglewise.ai/threats/cve-2026-88114-untrusted-pointer-dereference-in-dns-server-allows-an"},{"cve":"CVE-2026-85903","cvss":8.8,"epss":0.0056,"slug":"cve-2026-85903-untrusted-pointer-dereference-in-dns-server-allows-an","title":"Microsoft DNS Server pointer dereference remote code execution","severity":"high","exploited":false,"published_at":"2026-10-13T19:21:16.043+00:00","url":"https://junglewise.ai/threats/cve-2026-85903-untrusted-pointer-dereference-in-dns-server-allows-an"},{"cve":"CVE-2026-83889","cvss":8.8,"epss":0.0091,"slug":"cve-2026-83889-release-of-invalid-pointer-or-reference-in-dns-server-allows-an","title":"Microsoft DNS Server invalid pointer release code execution","severity":"high","exploited":false,"published_at":"2026-10-13T19:20:39.917+00:00","url":"https://junglewise.ai/threats/cve-2026-83889-release-of-invalid-pointer-or-reference-in-dns-server-allows-an"},{"cve":"CVE-2026-83635","cvss":7.5,"epss":0.012,"slug":"cve-2026-83635-out-of-bounds-read-in-dns-server-allows-an-unauthorized-attacker","title":"DNS Server out-of-bounds read denial of service","severity":"high","exploited":false,"published_at":"2026-10-13T19:20:03.557+00:00","url":"https://junglewise.ai/threats/cve-2026-83635-out-of-bounds-read-in-dns-server-allows-an-unauthorized-attacker"}],"weekly":[{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":1,"exploited":0,"vulnerabilities":29},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Microsoft Windows","slug":"windows-","vulnerabilities":1706,"url":"https://junglewise.ai/threats/technologies/windows-"},{"name":"Microsoft Windows 10","slug":"windows-10","vulnerabilities":588,"url":"https://junglewise.ai/threats/technologies/windows-10"},{"name":"Microsoft Windows 11","slug":"windows-11","vulnerabilities":493,"url":"https://junglewise.ai/threats/technologies/windows-11"},{"name":"Microsoft Windows 11 24h2","slug":"windows-11-24h2","vulnerabilities":486,"url":"https://junglewise.ai/threats/technologies/windows-11-24h2"},{"name":"Microsoft Windows Server 2012","slug":"windows-server-2012","vulnerabilities":473,"url":"https://junglewise.ai/threats/technologies/windows-server-2012"},{"name":"Microsoft Windows Server 2019","slug":"windows-server-2019","vulnerabilities":469,"url":"https://junglewise.ai/threats/technologies/windows-server-2019"},{"name":"Microsoft Windows Server 2022","slug":"windows-server-2022","vulnerabilities":461,"url":"https://junglewise.ai/threats/technologies/windows-server-2022"},{"name":"Microsoft Windows 11 25h2","slug":"windows-11-25h2","vulnerabilities":455,"url":"https://junglewise.ai/threats/technologies/windows-11-25h2"},{"name":"Microsoft Windows Server 2016","slug":"windows-server-2016","vulnerabilities":427,"url":"https://junglewise.ai/threats/technologies/windows-server-2016"},{"name":"Microsoft Windows Server 2025","slug":"windows-server-2025","vulnerabilities":427,"url":"https://junglewise.ai/threats/technologies/windows-server-2025"},{"name":"Microsoft Windows 10 21h2","slug":"windows-10-21h2","vulnerabilities":359,"url":"https://junglewise.ai/threats/technologies/windows-10-21h2"},{"name":"Microsoft Windows 10 22h2","slug":"windows-10-22h2","vulnerabilities":358,"url":"https://junglewise.ai/threats/technologies/windows-10-22h2"}],"technology":{"hub":true,"name":"Microsoft DNS Server","slug":"microsoft-dns-server","vendor":{"hub":true,"name":"Microsoft","slug":"microsoft","url":"https://junglewise.ai/threats/vendors/microsoft"},"aliases":[],"category":"service","description":"Microsoft DNS Server is a service that translates domain names into IP addresses on Windows systems.","url":"https://junglewise.ai/threats/technologies/microsoft-dns-server"},"most_severe":[{"cve":"CVE-2026-96113","cvss":9.8,"epss":0.0067,"slug":"cve-2026-96113-heap-based-buffer-overflow-in-dns-server-allows-an-unauthorized","title":"DNS Server heap-based buffer overflow","severity":"critical","exploited":false,"published_at":"2026-10-13T19:21:45.733+00:00","url":"https://junglewise.ai/threats/cve-2026-96113-heap-based-buffer-overflow-in-dns-server-allows-an-unauthorized"},{"cve":"CVE-2026-83889","cvss":8.8,"epss":0.0091,"slug":"cve-2026-83889-release-of-invalid-pointer-or-reference-in-dns-server-allows-an","title":"Microsoft DNS Server invalid pointer release code execution","severity":"high","exploited":false,"published_at":"2026-10-13T19:20:39.917+00:00","url":"https://junglewise.ai/threats/cve-2026-83889-release-of-invalid-pointer-or-reference-in-dns-server-allows-an"},{"cve":"CVE-2026-70167","cvss":8.8,"epss":0.0085,"slug":"cve-2026-70167-access-of-resource-using-incompatible-type-type-confusion-in-dns","title":"Microsoft DNS Server type confusion remote code execution","severity":"high","exploited":false,"published_at":"2026-10-13T19:19:30.537+00:00","url":"https://junglewise.ai/threats/cve-2026-70167-access-of-resource-using-incompatible-type-type-confusion-in-dns"},{"cve":"CVE-2026-88116","cvss":8.8,"epss":0.0056,"slug":"cve-2026-88116-untrusted-pointer-dereference-in-dns-server-allows-an","title":"Microsoft DNS Server untrusted pointer dereference","severity":"high","exploited":false,"published_at":"2026-10-13T19:21:29.937+00:00","url":"https://junglewise.ai/threats/cve-2026-88116-untrusted-pointer-dereference-in-dns-server-allows-an"},{"cve":"CVE-2026-88114","cvss":8.8,"epss":0.0056,"slug":"cve-2026-88114-untrusted-pointer-dereference-in-dns-server-allows-an","title":"Microsoft DNS Server untrusted pointer dereference","severity":"high","exploited":false,"published_at":"2026-10-13T19:21:29.51+00:00","url":"https://junglewise.ai/threats/cve-2026-88114-untrusted-pointer-dereference-in-dns-server-allows-an"},{"cve":"CVE-2026-85903","cvss":8.8,"epss":0.0056,"slug":"cve-2026-85903-untrusted-pointer-dereference-in-dns-server-allows-an","title":"Microsoft DNS Server pointer dereference remote code execution","severity":"high","exploited":false,"published_at":"2026-10-13T19:21:16.043+00:00","url":"https://junglewise.ai/threats/cve-2026-85903-untrusted-pointer-dereference-in-dns-server-allows-an"},{"cve":"CVE-2026-70127","cvss":8.1,"epss":0.0072,"slug":"cve-2026-70127-use-after-free-in-dns-server-allows-an-unauthorized-attacker-to","title":"Microsoft DNS Server use-after-free remote code execution","severity":"high","exploited":false,"published_at":"2026-10-13T19:19:24.917+00:00","url":"https://junglewise.ai/threats/cve-2026-70127-use-after-free-in-dns-server-allows-an-unauthorized-attacker-to"},{"cve":"CVE-2026-83635","cvss":7.5,"epss":0.012,"slug":"cve-2026-83635-out-of-bounds-read-in-dns-server-allows-an-unauthorized-attacker","title":"DNS Server out-of-bounds read denial of service","severity":"high","exploited":false,"published_at":"2026-10-13T19:20:03.557+00:00","url":"https://junglewise.ai/threats/cve-2026-83635-out-of-bounds-read-in-dns-server-allows-an-unauthorized-attacker"},{"cve":"CVE-2026-88130","cvss":6.5,"epss":0.0109,"slug":"cve-2026-88130-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read denial of service","severity":"medium","exploited":false,"published_at":"2026-10-13T19:21:32.173+00:00","url":"https://junglewise.ai/threats/cve-2026-88130-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"},{"cve":"CVE-2026-88129","cvss":6.5,"epss":0.0109,"slug":"cve-2026-88129-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to","title":"Microsoft DNS Server out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-13T19:21:32.037+00:00","url":"https://junglewise.ai/threats/cve-2026-88129-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to"}],"generated_at":"2026-10-19T03:07:00.200186+00:00"}