Role: DNS Server Information Disclosure Vulnerability
MonitorCVSS 6.5CVE-2026-108129Oct 13, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorNetwork
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. The vulnerability affects Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025 across multiple architectures and versions.
What this means
What could happen
An attacker with network access and valid credentials could read sensitive information from DNS Server memory, potentially exposing configuration details, cached records, or other data stored on the DNS server. This could be leveraged to gain further insight into your network's DNS infrastructure and domain structure.
Who's at risk
Windows Server administrators running DNS services should prioritize this patch. Affected systems include Windows Server 2016, 2019, 2022, and 2025 (both full and Server Core installations), as well as Windows 10 and Windows 11 systems running DNS Server role. Organizations using these servers for internal DNS resolution or as DNS forwarders in your network should apply updates across all affected builds.
How it could be exploited
An attacker with valid credentials and network access to the DNS Server (typically port 53 for queries, or management access via port 5358 or 135-139/445 for RPC) could craft a malicious DNS query or management request that triggers an out-of-bounds read, allowing them to leak information from server memory back to their machine.
Prerequisites
- Valid user credentials (authorized account on the domain or DNS server local machine)
- Network access to DNS Server ports (53 for DNS queries, or 135-139/445 for RPC management)
- Knowledge of DNS query format or management protocol to trigger the vulnerability
Remotely exploitableRequires authenticationInformation disclosure only (no code execution or availability impact)Affects critical DNS infrastructure
Exploitability
Unlikely to be exploited — EPSS score 0.9%
Affected products (28)
28 with fix
ProductAffected VersionsFix Status
Remediation & Mitigation
0/4
Do now
0/2WORKAROUNDRestrict network access to DNS Server management ports (135-139, 445, 5358) to authorized administrator workstations only using firewall rules
WORKAROUNDRestrict DNS query access (port 53) to authorized internal networks; disable DNS recursion from external/untrusted networks if not required
Schedule — requires maintenance window
0/2Patching may require device reboot — plan for process interruption
Windows Server 2016
HOTFIXPrioritize patching Windows Server 2016, 2019, 2022, and 2025 systems running DNS Server role first
All products
HOTFIXApply the 2026-Oct Windows security update to all affected Windows Server and Windows 10/11 systems
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/ff504997-7f3a-4366-9ae8-64944d0ccc86Get OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.