CVE-2026-33600
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
A malicious authoritative server can send an RPZ record that triggers a null pointer dereference due to a missing consistency check, resulting in a denial of service.
Risk Assessment
This can crash the DNS service and cause name resolution outages for the organization.
Recommendation
Update the DNS server software to a version that includes the consistency check fix for RPZ records.
Other vulnerabilities in DNS server
See all- CVE-2026-96113Critical
A heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. The vulnerability stems from improper memory handling during DNS query processing.
- CVE-2026-83869Critical
Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
- CVE-2016-3227Critical
A use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests.
- CVE-2026-97844Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97843Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97842Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97841Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97840Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97839Medium
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
- CVE-2026-97838Medium
An out-of-bounds read vulnerability in the DNS Server allows an authorized attacker to disclose information over a network.
Original NVD description (English source)
An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS