CVE-2026-41096

The vulnerability results from improper heap memory handling in the Windows DNS implementation — classified as CWE-122 (heap-based buffer overflow). An attacker can send specially crafted network data to the DNS service, causing a buffer overflow in the heap area. The result can be overwriting critical memory structures, which enables taking control of the process execution flow and running arbitrary code.

An unauthenticated remote attacker can execute arbitrary code in the context of the vulnerable DNS service, which in practice can lead to complete system takeover, loss of data confidentiality, and disruption of service availability.

Apply patches available from the manufacturer according to references published at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41096. It is recommended to immediately deploy available Microsoft security updates and — until the patch is installed — consider restricting network access to the DNS service only from trusted sources using a firewall.

Microsoft Windows DNS components — versions indicated in the manufacturer's references (Microsoft Security Response Center).