{"id":"CVE-2026-105579","kind":"vulnerability","aliases":["CVE-2026-105579"],"related":[],"title":"Windows DNS: integer overflow lets remote attackers read information over network","description":"Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a network.","summary":"A integer overflow in the Windows DNS service lets an unauthenticated attacker over the network disclose information. The sources do not say what data is exposed or which Windows versions are affected.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dns","infrastructure","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:00+00:00","first_seen_at":"2026-11-10T19:24:21+00:00","triaged_at":"2026-11-10T19:47:26+00:00","updated_at":"2026-11-10T19:47:26+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:47:26Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows DNS: integer overflow lets remote attackers read information over network","impact":"low","summary":"A integer overflow in the Windows DNS service lets an unauthenticated attacker over the network disclose information. The sources do not say what data is exposed or which Windows versions are affected.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","dns"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"unauthenticated remote attacker reads information from the Windows DNS server","analyst_note":"Check the NVD entry and Microsoft's security update guide for affected Windows Server versions, whether the DNS Server role is required, and the patch.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000624,"input_tokens":4490,"output_tokens":350,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the NVD entry and Microsoft's security update guide for affected Windows Server versions, whether the DNS Server role is required, and the patch.","search":"'-105579':14A,17A '-2026':13A,16A 'affect':52B 'allow':60C 'attack':7A,32B,63C 'cve':12A,15A 'data':44B 'disclos':36B,65C 'dns':2A,18B,27B,59C 'expos':46B 'inform':9A,37B,66C 'infrastructur':19B 'integ':3A,22B,53C 'let':5A,29B 'network':11A,35B,69C 'overflow':4A,23B,54C 'read':8A 'remot':6A 'say':42B 'servic':28B 'sourc':39B 'unauthent':31B 'unauthor':62C 'version':50B 'window':1A,20B,26B,49B,58C 'wraparound':56C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dns","high","infrastructure","windows"],"campaign_type":null,"search_a":"'-105579':14A,17A '-2026':13A,16A 'attack':7A 'cve':12A,15A 'dns':2A 'inform':9A 'integ':3A 'let':5A 'network':11A 'overflow':4A 'read':8A 'remot':6A 'window':1A","search_b":"'affect':52B 'attack':32B 'data':44B 'disclos':36B 'dns':18B,27B 'expos':46B 'inform':37B 'infrastructur':19B 'integ':22B 'let':29B 'network':35B 'overflow':23B 'say':42B 'servic':28B 'sourc':39B 'unauthent':31B 'version':50B 'window':20B,26B,49B","search_c":"'allow':60C 'attack':63C 'disclos':65C 'dns':59C 'inform':66C 'integ':53C 'network':69C 'overflow':54C 'unauthor':62C 'window':58C 'wraparound':56C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:00+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105579","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105579","severity":null,"published_at":"2026-11-10T19:18:00+00:00","modified_at":"2026-11-10T19:18:00+00:00","first_seen_at":"2026-11-10T19:24:21+00:00","fetched_at":"2026-11-10T19:24:21+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}