CVE-2016-3227
CriticalSummary
A use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests.
Risk Assessment
Attackers can exploit this vulnerability to gain control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update the system to the latest version to mitigate this vulnerability and to monitor DNS server logs for potential attack attempts.
Other vulnerabilities in DNS Server
See all- CVE-2026-96113Critical
A heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. The vulnerability stems from improper memory handling during DNS query processing.
- CVE-2026-83869Critical
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-97844Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97843Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97842Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97841Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97840Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97839Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97838Medium
An out-of-bounds read vulnerability in the DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97837Medium
An out-of-bounds read vulnerability in the DNS Server allows an authorized attacker to disclose information over a network.
Original NVD description (English source)
Use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests, aka "Windows DNS Server Use After Free Vulnerability."
Vulnerability data from NVD (NIST) · CISA KEV · EPSS