Description
Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows 11 version 23H2 | 10.0.22631.0 – < 10.0.22631.7079, 10.0.22631.0 – < 10.0.22631.7219 | 10.0.22631.7079 |
| Microsoft | Windows 11 Version 24H2 | 10.0.26100.0 – < 10.0.26100.8457 | 10.0.26100.8457 |
| Microsoft | Windows 11 Version 25H2 | 10.0.26200.0 – < 10.0.26200.8457 | 10.0.26200.8457 |
| Microsoft | Windows 11 version 26H1 | 10.0.28000.0 – < 10.0.28000.2113 | 10.0.28000.2113 |
| Microsoft | Windows Server 2022, 23H2 Edition (Server Core installation) | 10.0.25398.0 – < 10.0.25398.2330 | 10.0.25398.2330 |
| Microsoft | Windows Server 2025 | 10.0.26100.0 – < 10.0.26100.32860 | 10.0.26100.32860 |
| Microsoft | Windows Server 2025 (Server Core installation) | 10.0.26100.0 – < 10.0.26100.32860 | 10.0.26100.32860 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 6 repositories
-
satchfunky/CVE-2026-41096-POC ★ 39 · May 24, 2026
windows api bug
-
TwoSevenOneT/CVE-2026-41096-Attack-Surface ★ 15 · Jun 4, 2026
Attack surface in the real-world environment of CVE-2026-41096
-
mrk336/DNS-Mayhem-CVE-2026-41096-Deep-Dive ★ 4 · May 15, 2026
In‑depth technical analysis of CVE‑2026‑41096, a critical heap overflow in Windows DNSAPI.dll enabling remote code execution via crafted DNS responses. Includes attack vectors, patch insights, and de…
-
m0n1x90/CVE-2026-41096 ★ 3 · May 24, 2026
CVE-2026-41096: Heap Overflow in the Windows DNS Client
-
wuyou6956-glitch/CVE-2026-41096-POC ★ 0 · Sep 30, 2026
-
personnumber3377/dns_client_fuzzing ★ 0 · Jun 23, 2026
Fuzzing the Microsoft Windows DNS client library. Inspired by CVE-2026-41096.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 3
- WID-SEC-2026-1489 Microsoft Windows Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 8, 2026
- NCSC-2026-0141 Kwetsbaarheden verholpen in Microsoft Windows NCSC-NL (Netherlands) · Jun 2, 2026
- MSRC-CVE-2026-41096 Windows DNS Client Remote Code Execution Vulnerability Microsoft Security Response Center · May 12, 2026
References
- Windows DNS Client Remote Code Execution Vulnerability vendor-advisory patch