GoKawiil0patch issues micropatches for DNS flaw CVE-2026-62878 on unsupported Windows Server
Acros Security's 0patch service released micropatches fixing CVE-2026-62878, a remote code execution vulnerability in the Windows DNS Server service, for Windows Server versions that no longer receive official Microsoft updates. Microsoft had already patched the flaw in supported editions in August 2026 by capping DNS query recursion nesting depth at 62, and 0patch used a public proof-of-concept exploit credited to researchers Nicolas Alejandro Malizia and Joaquín Grassi to build equivalent fixes for legacy systems.