CVE-2026-41096
CriticalSummary
A heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker could remotely take control of the system, posing a serious security risk to the organization.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability.
Other vulnerabilities in Microsoft Windows DNS
See all- CVE-2026-50495Medium
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
- CVE-2026-50487High
A use-after-free vulnerability in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-50465High
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
- CVE-2026-50295Medium
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.
- CVE-2026-49174Medium
Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
- CVE-2026-41108High
Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS