CVE-2026-97831: Role: DNS Server Information Disclosure Vulnerability
Published Oct 13, 2026
·Updated
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
Other sources
Role: DNS Server Information Disclosure Vulnerability
— Microsoft
Affected Software
1 affected component
Microsoft DNS Server
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
CVE Published
via MITRE·07:01 PM
Data Sourced
via MITRE·07:01 PM
DescriptionSeverity
Frequently Asked Questions
1
Who is exposed to this issue?
Systems running Microsoft DNS Server are in scope. Exploitation is network-based and requires an attacker to be authorized, so exposure depends on whether a low-privileged attacker can authenticate or otherwise obtain the required access.
2
What could an attacker gain from successful exploitation?
Successful exploitation can disclose information through an out-of-bounds read. The provided impact information identifies confidentiality impact as high, with no integrity or availability impact indicated.
3
Does exploitation require user interaction or a complex attack?
No user interaction is required. The supplied vector rates attack complexity as low, but requires low privileges and network access.