CVE-2026-62878

DNS is like your business’s phone book for computer networks: it helps devices find where to go. This flaw lets a remote attacker overwhelm a part of Windows DNS and run their own code, which can lead to the DNS service being controlled or disrupted—making it harder for your internal systems to resolve names reliably.

This matters if you run Windows DNS Server on Windows 10 or Windows Server 2012/2012 R2/2016/2019/2022/2025. Because the weakness is reachable over a network, it’s especially important if your DNS service is reachable by untrusted networks (for example, from the internet or other networks your business doesn’t tightly control).

Verdict is RED because the vulnerability is tied to exploitation activity referenced in press attention (Lazarus group), meaning attackers are actively using it rather than it being theoretical. Even though there’s no KEV listing and no public exploit code on record, the impact is remote code execution, so you should patch immediately.