CVE-2026-65799— Windows DNS 权限提升漏洞
可能的 ATT&CK 技术 1AI
T1068 · Exploitation for Privilege Escalation影响版本矩阵 20
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Microsoft | Windows 10 Version 1607 | 10.0.14393.0< 10.0.14393.9418 | affected |
| Microsoft | Windows 10 Version 1809 | 10.0.17763.0< 10.0.17763.9115 | affected |
| Microsoft | Windows 10 Version 21H2 | 10.0.19044.0< 10.0.19044.7663 | affected |
| Microsoft | Windows 10 Version 22H2 | 10.0.19045.0< 10.0.19045.7663 | affected |
| Microsoft | Windows 11 version 23H2 | 10.0.22631.0< 10.0.22631.7517 | affected |
| Microsoft | Windows 11 Version 23H2 | 10.0.22631.0< 10.0.22631.7517 | affected |
| Microsoft | Windows 11 Version 24H2 | 10.0.26100.0< 10.0.26100.9168 | affected |
| Microsoft | Windows 11 Version 25H2 | 10.0.26200.0< 10.0.26200.9168 | affected |
| Microsoft | Windows 11 version 26H1 | 10.0.28000.0< 10.0.28000.2704 | affected |
| Microsoft | Windows Server 2012 | 6.2.9200.0< 6.2.9200.26279 | affected |
| Microsoft | Windows Server 2012 (Server Core installation) | 6.2.9200.0< 6.2.9200.26279 | affected |
| Microsoft | Windows Server 2012 R2 | 6.3.9600.0< 6.3.9600.23337 | affected |
| Microsoft | Windows Server 2012 R2 (Server Core installation) | 6.3.9600.0< 6.3.9600.23337 | affected |
| Microsoft | Windows Server 2016 | 10.0.14393.0< 10.0.14393.9418 | affected |
| Microsoft | Windows Server 2016 (Server Core installation) | 10.0.14393.0< 10.0.14393.9418 | affected |
| Microsoft | Windows Server 2019 | 10.0.17763.0< 10.0.17763.9115 | affected |
| Microsoft | Windows Server 2019 (Server Core installation) | 10.0.17763.0< 10.0.17763.9115 | affected |
| Microsoft | Windows Server 2022 | 10.0.20348.0< 10.0.20348.5499 | affected |
| Microsoft | Windows Server 2025 | 10.0.26100.0< 10.0.26100.33296 | affected |
| Microsoft | Windows Server 2025 (Server Core installation) | 10.0.26100.0< 10.0.26100.33296 | affected |
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2026-65799 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Windows DNS Elevation of Privilege Vulnerability
来源: CVE Program / CVE List V5
Vulnerability Description
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
整数溢出或超界折返
来源: CVE Program / CVE List V5
受影响产品
二、漏洞 CVE-2026-65799 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-65799 的情报信息
请登录查看更多情报信息。
CVE-2026-65799 厂商安全公告 (1)
同批安全公告 · Microsoft · 2026-08-11 · 共 402 条
| CVE-2026-59124 | 9.8 CRITICAL | 微软高性能计算HPC Pack远程代码执行漏洞 |
| CVE-2026-65791 | 9.8 CRITICAL | Windows iSCSI Target Service 远程代码执行漏洞 |
| CVE-2026-62893 | 9.8 CRITICAL | Windows Deployment Services TFTP 服务器远程代码执行漏洞 |
| CVE-2026-62815 | 9.8 CRITICAL | Microsoft QUIC 远程代码执行漏洞 |
| CVE-2026-62878 | 9.8 CRITICAL | Windows DNS Server 远程代码执行漏洞 |
| CVE-2026-50516 | 9.4 CRITICAL | Microsoft Azure Kubernetes Service 权限提升漏洞 |
| CVE-2026-70306 | 9.3 CRITICAL | Microsoft Office SharePoint 欺骗漏洞 |
| CVE-2026-62795 | 8.8 HIGH | Windows LDAP 远程代码执行漏洞 |
| CVE-2026-49179 | 8.8 HIGH | Windows Active Directory Domain Services远程代码执行漏洞 |
| CVE-2026-62817 | 8.8 HIGH | Windows DNS 服务器远程代码执行漏洞 |
| CVE-2026-66805 | 8.8 HIGH | Microsoft SharePoint Server 远程代码执行漏洞 |
| CVE-2026-65811 | 8.8 HIGH | Power BI 远程代码执行漏洞 |
| CVE-2026-59113 | 8.8 HIGH | Visual Studio Code 远程代码执行漏洞 |
| CVE-2026-69320 | 8.8 HIGH | Visual Studio Code 远程代码执行漏洞 |
| CVE-2026-62784 | 8.8 HIGH | Microsoft 本地安全授权服务器远程代码执行漏洞 |
| CVE-2026-62816 | 8.8 HIGH | Windows RMCAST 远程代码执行漏洞 |
| CVE-2026-62800 | 8.8 HIGH | Windows SMBv3 服务器远程代码执行漏洞 |
| CVE-2026-57104 | 8.8 HIGH | Azure Storage Explorer 提权漏洞 |
| CVE-2026-70324 | 8.8 HIGH | Microsoft SharePoint 权限提升漏洞 |
| CVE-2026-62822 | 8.8 HIGH | Windows GDI+ 远程代码执行漏洞 |
显示前 20 条，共 402 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-65799
暂无评论