Description
Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.
Published: 2026-10-13
Score: 7.5 High
EPSS: 1.3% Low
KEV: No
Impact: Denial of Service
Action: Immediate Patch
AI Analysis

Impact

An unhandled exception in the Windows DNS server component can be triggered by a specially crafted DNS query. When the exception occurs, the DNS service crashes, causing the DNS server to stop responding to requests until it is manually restarted. The primary impact is denial of service to any domain name resolution served by the affected server, potentially disrupting applications that rely on DNS for connectivity.

Affected Systems

Microsoft Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025 – including both standard and Server Core installations – are affected.

Risk and Exploitability

The vulnerability scores a CVSS of 7.5, indicating high severity, and is not currently listed in CISA’s KEV catalog. The EPSS score is 1%, indicating a low but non-zero exploitation probability; the high CVSS suggests that the vulnerability is worth addressing promptly. Attackers can exploit it remotely over the network by sending malformed DNS packets; no local privileges are required. Once triggered, the DNS service crashes, leading to service disruption until the server is rebooted or the vulnerability is patched.

Generated by OpenCVE AI on October 17, 2026 at 03:58 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the Microsoft security update for CVE-2026-70082 as soon as it becomes available via Windows Update or WSUS.
  • If the update cannot be applied immediately, restrict DNS traffic to trusted IP ranges using firewall rules or implement DNS filtering to drop anomalous packets.
  • Configure monitoring and alerts on DNS server logs to detect unexpected restarts or high error rates, and investigate any abnormal query activity promptly.

Generated by OpenCVE AI on October 17, 2026 at 03:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 16 Oct 2026 17:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:*

Wed, 14 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft windows Server 2012 (server Core Installation)
Microsoft windows Server 2012 R2
Microsoft windows Server 2012 R2 (server Core Installation)
Microsoft windows Server 2016 (server Core Installation)
Microsoft windows Server 2019 (server Core Installation)
Microsoft windows Server 2025 (server Core Installation)
Vendors & Products Microsoft windows Server 2012 (server Core Installation)
Microsoft windows Server 2012 R2
Microsoft windows Server 2012 R2 (server Core Installation)
Microsoft windows Server 2016 (server Core Installation)
Microsoft windows Server 2019 (server Core Installation)
Microsoft windows Server 2025 (server Core Installation)

Wed, 14 Oct 2026 09:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 19:15:00 +0000

Type Values Removed Values Added
Description Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.
Title Windows DNS Denial of Service Vulnerability
First Time appeared Microsoft
Microsoft windows Server 2012
Microsoft windows Server 2012 R2
Microsoft windows Server 2016
Microsoft windows Server 2019
Microsoft windows Server 2022
Microsoft windows Server 2025
Weaknesses CWE-248
CPEs cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft windows Server 2012
Microsoft windows Server 2012 R2
Microsoft windows Server 2016
Microsoft windows Server 2019
Microsoft windows Server 2022
Microsoft windows Server 2025
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C'}

Subscriptions

Microsoft Windows Server 2012 Windows Server 2012 (server Core Installation) Windows Server 2012 R2 Windows Server 2012 R2 Windows Server 2012 R2 (server Core Installation) Windows Server 2016 Windows Server 2016 (server Core Installation) Windows Server 2019 Windows Server 2019 (server Core Installation) Windows Server 2022 Windows Server 2025 Windows Server 2025 (server Core Installation)
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-10-31T18:01:50.291Z

Reserved: 2026-08-03T23:23:44.268Z

Link: CVE-2026-70082

cve-icon Vulnrichment

Updated: 2026-10-13T22:12:36.127Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-13T19:19:19.657

Modified: 2026-10-16T17:37:06.617

Link: CVE-2026-70082

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-17T04:00:03Z

Weaknesses