EUVD-2026-73114
GHSA-28c5-4p38-v6v8
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Local-only exploitation requiring pre-existing high-privilege access; full CIA impact reflects SYSTEM-level control achievable through the privileged DNS service post-traversal.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
AnalysisAI
Privilege escalation via relative path traversal (CWE-23) affects the Windows DNS Server service across a broad range of Windows Server releases from 2012 through 2025. An authorized local attacker holding high-privilege access can manipulate relative path sequences in the DNS service to reference files or system resources outside the intended directory scope, resulting in full Confidentiality, Integrity, and Availability impact through SYSTEM-level privilege escalation. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires all three of the following conditions: (1) local access to the target host (AV:L - remote exploitation is not possible), (2) an account with high privileges such as local administrator (PR:H), and (3) the Windows DNS Server role must be installed and running on the target system. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 score of 6.7 (Medium) with vector AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H accurately characterizes the constrained exploitation profile: the attack is local-only and requires the attacker to already possess high-privilege (administrative) access before exploitation is possible. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Microsoft has released patches for all affected Windows Server versions; administrators should apply the relevant cumulative updates to reach the fixed builds: Server 2025 to 10.0.26100.33438, Server 2022 to 10.0.20348.5622, Server 2019 and Windows 10 1809 to 10.0.17763.9245, Server 2016 and Windows 10 1607 to 10.0.14393.9512, Server 2012 R2 to 6.3.9600.23397, and Server 2012 to 6.2.9200.26349. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-23 – Relative Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today