CVE-2026-96176: Windows DNS Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.
Other sources
Windows DNS Denial of Service Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9974Fixed in 10.0.26200.9911Patch KB5132043 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33822Fixed in 10.0.26100.33730Patch KB5131077 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9974Fixed in 10.0.26100.9911Patch KB5132043 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26300.9974Fixed in 10.0.26300.9911Patch KB5132043 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.3501Patch KB5132059 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7711Patch KB5131087
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vulnerability can be exploited over a network by an unauthorized attacker. No privileges or user interaction are required according to the provided vector.
Which systems are identified as affected?
The affected software list includes Microsoft Windows 11 and Microsoft Windows Server 2025. Systems using the Windows DNS component on those platforms should be prioritized for remediation.