Skip to content
OpenAdvisories
High · 8.1 CVE-2026-96177 EUVD-2026-121499GHSA-xqxf-pr22-xhv9

Windows Domain Name Service Remote Code Execution Vulnerability

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by microsoft

Description

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Affected products

VendorProductAffectedFixed
Microsoft Windows Server 2025 10.0.26100.0 – < 10.0.26100.33822 10.0.26100.33822
Microsoft Windows Server 2025 (Server Core installation) 10.0.26100.0 – < 10.0.26100.33822 10.0.26100.33822

Advisories 2

References