CVE-2026-70087: Role: DNS Server Security Feature Bypass Vulnerability
Published Oct 13, 2026
·Updated
Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.
Other sources
Role: DNS Server Security Feature Bypass Vulnerability
— Microsoft
Affected Software
17 affected componentsFixes available
Microsoft DNS Server
Microsoft Windows Server 2019<10.0.17763.9376
10.0.17763.9376
Microsoft Windows Server 2012 R2<6.3.9600.23470
6.3.9600.23470
Microsoft Windows Server 2012<6.2.9200.26434
6.2.9200.26434
Microsoft Windows 10=1607
10.0.14393.9612
Microsoft Windows Server 2016<10.0.14393.9612
10.0.14393.9612
Microsoft Windows Server 2016<10.0.14393.9612
10.0.14393.9612
Microsoft Windows Server 2012<6.2.9200.26434
6.2.9200.26434
Microsoft Windows Server 2025<10.0.26100.33650
10.0.26100.33650
Microsoft Windows Server 2022<10.0.20348.5761
10.0.20348.5761
Microsoft Windows 10=1607
10.0.14393.9612
Microsoft Windows Server 2012 R2<6.3.9600.23470
6.3.9600.23470
Microsoft Windows Server 2022<10.0.20348.5761
10.0.20348.5761
Microsoft Windows Server 2025<10.0.26100.33650
10.0.26100.33650
Microsoft Windows 10=1809
10.0.17763.9376
Microsoft Windows 10=1809
10.0.17763.9376
Microsoft Windows Server 2019<10.0.17763.9376
10.0.17763.9376
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.26434Patch KB5126835 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.23470Patch KB5126836 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9376Patch KB5126651 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9612Patch KB5126868 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33650Patch KB5126646 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5761Patch KB5126655
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·06:59 PM
Data Sourced
via MITRE·06:59 PM
DescriptionSeverity