CVE-2016-3227: Microsoft Windows Server 2012

Critical severity, CVSS 9.8. EPSS: 25.5% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests, aka "Windows DNS Server Use After Free Vulnerability."

Affected products

• Microsoft Windows Server 2012: affected versions not specified; version r2 only

Published 2016-06-16. Last modified 2026-06-17.