OTPulse

Role: DNS Server Information Disclosure Vulnerability

MonitorCVSS 6.5CVE-2026-108128Oct 13, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorNetwork
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary

An out-of-bounds read vulnerability in the Windows DNS Server allows an authenticated attacker to disclose sensitive information from the DNS Server process memory over the network. The vulnerability affects all Windows 10, Windows 11, and Windows Server versions with DNS Server functionality.

What this means
What could happen
An authenticated attacker on your network could read sensitive information from the Windows DNS Server process memory, potentially exposing cached DNS data, credentials, or other configuration details.
Who's at risk
Organizations running Windows 10 (versions 1607, 1809, 21H2, 22H2) or Windows 11 (versions 23H2, 24H2, 25H2, 26H1, 26H2) on servers, workstations, or embedded systems that function as DNS servers. Also affects Windows Server 2016, 2019, 2022, and 2025 systems with DNS Server role enabled.
How it could be exploited
An attacker with network access and valid credentials could send specially crafted DNS requests to trigger an out-of-bounds memory read on the DNS Server, causing it to leak information from process memory back to the attacker.
Prerequisites
  • Network access to DNS Server port 53 (UDP/TCP)
  • Valid credentials to authenticate to the network
  • DNS Server must be running on an affected Windows system
remotely exploitablerequires authenticationmedium complexityinformation disclosure (non-destructive)
Exploitability
Unlikely to be exploited — EPSS score 0.9%
Affected products (28)
28 with fix
ProductAffected VersionsFix Status
Windows 10 Version 1607 for 32-bit SystemsAll versionsBuild 10.0.14393.9612
Windows 10 Version 1607 for x64-based SystemsAll versionsBuild 10.0.14393.9612
Windows Server 2016All versionsBuild 10.0.14393.9612
Windows Server 2016 (Server Core installation)All versionsBuild 10.0.14393.9612
Windows 10 Version 1809 for 32-bit SystemsAll versionsBuild 10.0.17763.9376
Remediation & Mitigation
0/2
Do now
0/1
WORKAROUNDRestrict network access to DNS Server port 53 to authorized DNS clients and administration systems only
Schedule — requires maintenance window
0/1

Patching may require device reboot — plan for process interruption

HOTFIXApply the October 2026 Microsoft security update to all Windows 10, Windows 11, and Windows Server systems running affected versions
View full vendor advisory
API: /api/v1/advisories/e3edeb0f-b3f4-4cbf-a873-c013c6356c26

Get OTPulse briefings by email

Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.