Vulnerability intelligence

CVE-2026-62878

Microsoft Windows Server 2012 CWE-121

Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

1.0%

Riskier than 60% of all CVEs · checked 2026-09-25

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

4 articles across 4 outlets · first covered Aug 11, 2026 · latest Sep 9, 2026

Coverage timeline

Microsoft Patches Record 974 CVEs Amid Exploited Windows Zero-Days
www.infosecurity-magazine.com · Sep 9, 2026
Microsoft patches wormable DNS flaw and critical WinSock zero day
securityaffairs.com · Aug 12, 2026
Microsoft's Patch Tuesday Deluge Continues With August Updates
www.darkreading.com · Aug 11, 2026
Microsoft Patch Tuesday August 2026, (Tue, Aug 11th)
isc.sans.edu · Aug 11, 2026

Related CVEs — Microsoft

CVE-2026-65660KEV CVE-2026-85880KEV CVE-2025-32711 CVE-2019-0708KEV CVE-2020-0688KEV CVE-2026-85921 CVE-2026-55945 CVE-2026-62721