CVE-2026-49174
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
Risk Assessment
An authorized user can modify DNS configuration, potentially leading to traffic redirection or man-in-the-middle attacks.
Recommendation
Install the latest Windows security updates that add required authentication.
Other vulnerabilities in Microsoft Windows DNS
See all- CVE-2026-41096Critical
A heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-50495Medium
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
- CVE-2026-50487High
A use-after-free vulnerability in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-50465High
Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.
- CVE-2026-50295Medium
Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.
- CVE-2026-41108High
Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.