CVE-2026-96113
9.8CriticalPublished 13 Oct 2026 · NVD status: Analyzed · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-122, CWE-197
Impact
Unauthenticated remote attackers can execute arbitrary code on the DNS Server over the network. They only need network access to send malicious requests to the listening DNS service.
Root cause
A numeric truncation leading to a heap-based buffer overflow when processing DNS network requests.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Apply the security update from the Microsoft Security Update Guide for this advisory. If patching must wait, restrict network and firewall access to the DNS server port (UDP/TCP 53) strictly to trusted internal resolvers.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.