CVE-2026-49175
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could escalate privileges, potentially leading to system takeover or disruption of DNS services.
Recommendation
Apply the Windows security update recommended by Microsoft.
Other vulnerabilities in Windows DNS
See all- CVE-2026-62878Critical
A stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-70330Medium
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-70304Medium
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65799Medium
Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65798Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65797Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65795Medium
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-65789High
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
- CVE-2026-62883Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
- CVE-2026-62881Medium
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.