high8.8
CVE-2026-70167
Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.
Impact
Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Server 2025 (Server Core Installation) | from 10.0.26100.0 before 10.0.26100.33650 |
| Microsoft | Windows Server 2025 | from 10.0.26100.0 before 10.0.26100.33650 |
| Microsoft | Windows Server 2022 | from 10.0.20348.0 before 10.0.20348.5761 |
| Microsoft | Windows Server 2022 | before 10.0.20348.5761 |
| Microsoft | Windows Server 2025 | before 10.0.26100.33650 |