# Microsoft DNS Server vulnerabilities Source: https://junglewise.ai/threats/technologies/microsoft-dns-server Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 19 October 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/microsoft-dns-server.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 29 vulnerabilities in Microsoft DNS Server: 29 in the last 7 days and 29 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-97840, was published on 13 October 2026. 29 vulnerabilities in the last four weeks, up from none in the four before. 1 critical against 0. ## Counts - Last 7 days: 29 - Last 30 days: 29 - Last 90 days: 29 - All time: 29 (1 critical, 0 exploited in the wild) ## About Microsoft DNS Server Microsoft DNS Server is a service that translates domain names into IP addresses on Windows systems. ## Latest Microsoft DNS Server vulnerabilities - [CVE-2026-97840: DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97840-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97839: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97839-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97838: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97838-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97837: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97837-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97836: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97836-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97835: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97835-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97834: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97834-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97832: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97832-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97827: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97827-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97825: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97825-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97824: DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97824-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97822: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-97822-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97821: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97821-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-97820: Microsoft DNS Server out-of-bounds read information disclosure](https://junglewise.ai/threats/cve-2026-97820-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-96926: Microsoft DNS Server missing authorization vulnerability](https://junglewise.ai/threats/cve-2026-96926-missing-authorization-in-dns-server-allows-an-authorized-attacker) (medium, CVSS 5.5, published 13 Oct 2026) - [CVE-2026-96113: DNS Server heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-96113-heap-based-buffer-overflow-in-dns-server-allows-an-unauthorized) (critical, CVSS 9.8, published 13 Oct 2026) - [CVE-2026-88130: Microsoft DNS Server out-of-bounds read denial of service](https://junglewise.ai/threats/cve-2026-88130-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-88129: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-88129-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-88125: Microsoft DNS Server out-of-bounds read denial of service](https://junglewise.ai/threats/cve-2026-88125-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-88122: Microsoft DNS Server out-of-bounds read denial of service](https://junglewise.ai/threats/cve-2026-88122-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-88116: Microsoft DNS Server untrusted pointer dereference](https://junglewise.ai/threats/cve-2026-88116-untrusted-pointer-dereference-in-dns-server-allows-an) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-88114: Microsoft DNS Server untrusted pointer dereference](https://junglewise.ai/threats/cve-2026-88114-untrusted-pointer-dereference-in-dns-server-allows-an) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-85903: Microsoft DNS Server pointer dereference remote code execution](https://junglewise.ai/threats/cve-2026-85903-untrusted-pointer-dereference-in-dns-server-allows-an) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-83889: Microsoft DNS Server invalid pointer release code execution](https://junglewise.ai/threats/cve-2026-83889-release-of-invalid-pointer-or-reference-in-dns-server-allows-an) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-83635: DNS Server out-of-bounds read denial of service](https://junglewise.ai/threats/cve-2026-83635-out-of-bounds-read-in-dns-server-allows-an-unauthorized-attacker) (high, CVSS 7.5, published 13 Oct 2026) ## Most severe Microsoft DNS Server vulnerabilities - [CVE-2026-96113: DNS Server heap-based buffer overflow](https://junglewise.ai/threats/cve-2026-96113-heap-based-buffer-overflow-in-dns-server-allows-an-unauthorized) (critical, CVSS 9.8, published 13 Oct 2026) - [CVE-2026-83889: Microsoft DNS Server invalid pointer release code execution](https://junglewise.ai/threats/cve-2026-83889-release-of-invalid-pointer-or-reference-in-dns-server-allows-an) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-70167: Microsoft DNS Server type confusion remote code execution](https://junglewise.ai/threats/cve-2026-70167-access-of-resource-using-incompatible-type-type-confusion-in-dns) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-88116: Microsoft DNS Server untrusted pointer dereference](https://junglewise.ai/threats/cve-2026-88116-untrusted-pointer-dereference-in-dns-server-allows-an) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-88114: Microsoft DNS Server untrusted pointer dereference](https://junglewise.ai/threats/cve-2026-88114-untrusted-pointer-dereference-in-dns-server-allows-an) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-85903: Microsoft DNS Server pointer dereference remote code execution](https://junglewise.ai/threats/cve-2026-85903-untrusted-pointer-dereference-in-dns-server-allows-an) (high, CVSS 8.8, published 13 Oct 2026) - [CVE-2026-70127: Microsoft DNS Server use-after-free remote code execution](https://junglewise.ai/threats/cve-2026-70127-use-after-free-in-dns-server-allows-an-unauthorized-attacker-to) (high, CVSS 8.1, published 13 Oct 2026) - [CVE-2026-83635: DNS Server out-of-bounds read denial of service](https://junglewise.ai/threats/cve-2026-83635-out-of-bounds-read-in-dns-server-allows-an-unauthorized-attacker) (high, CVSS 7.5, published 13 Oct 2026) - [CVE-2026-88130: Microsoft DNS Server out-of-bounds read denial of service](https://junglewise.ai/threats/cve-2026-88130-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) - [CVE-2026-88129: Microsoft DNS Server out-of-bounds read](https://junglewise.ai/threats/cve-2026-88129-out-of-bounds-read-in-dns-server-allows-an-authorized-attacker-to) (medium, CVSS 6.5, published 13 Oct 2026) ## Vulnerabilities per week 29 vulnerabilities in the last four weeks, up from none in the four before. 1 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 27 Jul 2026 | 0 | 0 | 0 | | 3 Aug 2026 | 0 | 0 | 0 | | 10 Aug 2026 | 0 | 0 | 0 | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 29 | 1 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | ## Other Microsoft technologies - [Microsoft Windows](https://junglewise.ai/threats/technologies/windows-): 1,706 vulnerabilities - [Microsoft Windows 10](https://junglewise.ai/threats/technologies/windows-10): 588 vulnerabilities - [Microsoft Windows 11](https://junglewise.ai/threats/technologies/windows-11): 493 vulnerabilities - [Microsoft Windows 11 24h2](https://junglewise.ai/threats/technologies/windows-11-24h2): 486 vulnerabilities - [Microsoft Windows Server 2012](https://junglewise.ai/threats/technologies/windows-server-2012): 473 vulnerabilities - [Microsoft Windows Server 2019](https://junglewise.ai/threats/technologies/windows-server-2019): 469 vulnerabilities - [Microsoft Windows Server 2022](https://junglewise.ai/threats/technologies/windows-server-2022): 461 vulnerabilities - [Microsoft Windows 11 25h2](https://junglewise.ai/threats/technologies/windows-11-25h2): 455 vulnerabilities - [Microsoft Windows Server 2016](https://junglewise.ai/threats/technologies/windows-server-2016): 427 vulnerabilities - [Microsoft Windows Server 2025](https://junglewise.ai/threats/technologies/windows-server-2025): 427 vulnerabilities - [Microsoft Windows 10 21h2](https://junglewise.ai/threats/technologies/windows-10-21h2): 359 vulnerabilities - [Microsoft Windows 10 22h2](https://junglewise.ai/threats/technologies/windows-10-22h2): 358 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Microsoft DNS Server vulnerabilities", https://junglewise.ai/threats/technologies/microsoft-dns-server, 19 October 2026.