{"id":"CVE-2026-119971","kind":"vulnerability","aliases":["CVE-2026-119971"],"related":[],"title":"Windows DNS: out-of-bounds read lets an authorized attacker leak data","description":"Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.","summary":"A memory read past the end of a buffer in the Windows DNS service lets an attacker who already has authorization reach across the network and read data it should not see. The sources give no further detail on what data or which Windows versions are affected.","severity":"medium","cvss":4.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","self-hosted","windows","windows-dns"],"not_affected_if":["no-windows-dns-server"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:22+00:00","first_seen_at":"2026-11-10T19:25:05+00:00","triaged_at":"2026-11-10T20:02:50+00:00","updated_at":"2026-11-10T20:02:50+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:02:50Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows DNS: out-of-bounds read lets an authorized attacker leak data","impact":"low","summary":"A memory read past the end of a buffer in the Windows DNS service lets an attacker who already has authorization reach across the network and read data it should not see. The sources give no further detail on what data or which Windows versions are affected.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","windows-dns","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"attacker reads memory contents over the network, leaking sensitive data","analyst_note":"Check the Microsoft Security Update Guide entry for CVE-2026-119971 for affected Windows versions, the required authorization, and the fixed build.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-windows-dns-server"],"who_is_affected":"Organizations running the Windows DNS Server role are the likely exposure, since the flaw is in that service. The sources do not say which Windows versions are affected or what the required authorization is.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000669,"input_tokens":4483,"output_tokens":441,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119971':16A,19A '-2026':15A,18A 'across':50B 'affect':74B 'allow':83C 'alreadi':46B 'attack':11A,44B,86C 'author':10A,48B,85C 'bound':6A,78C 'buffer':36B 'cve':14A,17A 'data':13A,55B,68B 'detail':65B 'disclos':88C 'dns':2A,27B,40B,82C 'end':33B 'give':62B 'host':23B 'inform':89C 'infrastructur':20B 'leak':12A 'let':8A,42B 'memori':29B 'network':52B,92C 'out-of-bound':3A,75C 'past':31B 'reach':49B 'read':7A,30B,54B,79C 'see':59B 'self':22B 'self-host':21B 'servic':41B 'sourc':61B 'version':72B 'window':1A,24B,26B,39B,71B,81C 'windows-dn':25B","nicknames":[],"mitigations":[],"who_affected":"Organizations running the Windows DNS Server role are the likely exposure, since the flaw is in that service. The sources do not say which Windows versions are affected or what the required authorization is.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","selfhosted","windows","windowsdns"],"campaign_type":null,"search_a":"'-119971':16A,19A '-2026':15A,18A 'attack':11A 'author':10A 'bound':6A 'cve':14A,17A 'data':13A 'dns':2A 'leak':12A 'let':8A 'out-of-bound':3A 'read':7A 'window':1A","search_b":"'across':50B 'affect':74B 'alreadi':46B 'attack':44B 'author':48B 'buffer':36B 'data':55B,68B 'detail':65B 'dns':27B,40B 'end':33B 'give':62B 'host':23B 'infrastructur':20B 'let':42B 'memori':29B 'network':52B 'past':31B 'reach':49B 'read':30B,54B 'see':59B 'self':22B 'self-host':21B 'servic':41B 'sourc':61B 'version':72B 'window':24B,26B,39B,71B 'windows-dn':25B","search_c":"'allow':83C 'attack':86C 'author':85C 'bound':78C 'disclos':88C 'dns':82C 'inform':89C 'network':92C 'out-of-bound':75C 'read':79C 'window':81C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:22+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119971","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119971","severity":null,"published_at":"2026-11-10T19:20:22+00:00","modified_at":"2026-11-10T19:20:22+00:00","first_seen_at":"2026-11-10T19:25:05+00:00","fetched_at":"2026-11-10T19:25:05+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}