CVE-2026-70167

Опубликовано: 13 окт. 2026

Источник: msrc

CVSS3: 8.8

EPSS Низкий

Описание

Windows Domain Name Service Remote Code Execution Vulnerability

Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.

Продукт	Статья	Обновление
Windows Server 2022	5126655	Security Update
Windows Server 2022 (Server Core installation)	5126655	Security Update
Windows Server 2025	5126646	Security Update
Windows Server 2025 (Server Core installation)	5126646	Security Update

Показывать по

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

EPSS

Процентиль: 63%

0.00984

Низкий

8.8 High

CVSS3

CVE-2026-70167

CVSS3: 8.8

nvd

26 дней назад

Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.

GHSA-m7j9-9j6g-vg2m

CVSS3: 8.8

github

26 дней назад

Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.

EPSS

Процентиль: 63%

0.00984

Низкий

8.8 High

CVSS3