CVE-2026-41096
CriticalPublished
Windows DNS Client Remote Code Execution Vulnerability
- Published
- May 12, 2026
- Updated
- Aug 10, 2026
- Assigning CNA
- microsoft
- Evidence observed
- Aug 8, 2026
Primary CVSS
9.8/ 10Critical
Loading vulnerability catalog
Windows DNS Client Remote Code Execution Vulnerability
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLow · next 30 days
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.
Proof-of-concept exploit for CVE-2026-41096: heap overflow in Windows DNS Client's DnsRawTruncateMessageForUdp(). Includes rogue DNS server and trigger client to confirm vulnerability.
Proof-of-concept exploit for CVE-2026-41096, demonstrating the vulnerability and providing a reproducible test case for security researchers and defenders.
In‑depth technical analysis of CVE‑2026‑41096, a critical heap overflow in Windows DNSAPI.dll enabling remote code execution via crafted DNS responses. Includes attack vectors, patch insights, and defensive guidance for security teams.
windows api bug
Attack surface in the real-world environment of CVE-2026-41096
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.