Vulnerabilities
Microsoft DNS Server Vulnerability CVE-2026-70083 Enables Local Tampering
A flaw in Microsoft DNS Server’s authorization logic allows a local attacker with sufficient privileges to tamper with DNS records. The issue, identified as CVE‑2026‑70083, can be mitigated by applying the latest security update and tightening local admin rights.
What happened
Microsoft DNS Server contains an authorization flaw that permits a local attacker with sufficient privileges to modify DNS records and configurations. The vulnerability, CVE‑2026‑70083, can be exploited without remote access.
Impact
Compromise of DNS data can redirect traffic, facilitate phishing, or disrupt services. The flaw is limited to systems where the attacker can run code with local privileges.
Mitigation
- Apply the latest Microsoft security update for DNS Server (KBxxxxxx).
- Restrict local administrator rights; use least‑privilege accounts for DNS management.
- Disable or isolate unnecessary DNS services on non‑critical hosts.
Monitoring
Enable DNS logging and review for unexpected changes to zone files or configuration. Correlate with audit logs for privilege escalation attempts.
Related vulnerabilities
CVE-2026-70087: Local DNS Server Security Feature Bypass
An attacker with local access to Windows Server DNS can bypass a security feature, enabling arbitrary code execution or zone tampering. The flaw is exploitable without network connectivity. Apply the latest patch and enforce least‑privilege on DNS service accounts.
Read briefing
CVE-2026-83715: Windows Error Reporting Tampering Vulnerability
Microsoft identified a missing authentication check in Windows Error Reporting that allows a local attacker with authorized access to tamper with error reports. The flaw can be used to modify or delete diagnostic data, potentially masking malicious activity. Defenders should apply the latest security update and consider disabling WER on systems where it is not required.
Read briefing
CVE-2026-83657: Windows MDM Weak Authentication Enables Local Tampering
A flaw in Windows Modern Device Management (MDM) authentication allows an attacker with local privileges to modify MDM configurations. The vulnerability can be exploited on Windows 10/11 systems that use MDM for device management. Apply the latest security update or disable MDM to mitigate.
Read briefing
Windows DHCP Server Security Feature Bypass Vulnerability (CVE-2026-83787)
A local authorized attacker can bypass a built‑in security feature in Windows DHCP Server due to insufficient data authenticity verification. The flaw is present in all Windows Server DHCP services and can be mitigated by applying the latest Microsoft patch and tightening local admin controls.
Read briefing