---
id: "CVE-2026-119971"
page: "https://infrastack.ai/live/CVE-2026-119971"
kind: "vulnerability"
aliases: ["CVE-2026-119971"]
title: "Windows DNS: out-of-bounds read lets an authorized attacker leak data"
severity: "medium"
cvss: 4.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "self-hosted", "windows", "windows-dns"]
not_affected_if: ["no-windows-dns-server"]
published_at: "2026-11-10T19:20:22+00:00"
first_seen_at: "2026-11-10T19:25:05+00:00"
updated_at: "2026-11-10T20:02:50+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119971", "first_seen_at": "2026-11-10T19:25:05+00:00"}]
exploit_sources: []
---

# Windows DNS: out-of-bounds read lets an authorized attacker leak data

Link for people: https://infrastack.ai/live/CVE-2026-119971 (this .md is for agents)

A memory read past the end of a buffer in the Windows DNS service lets an attacker who already has authorization reach across the network and read data it should not see. The sources give no further detail on what data or which Windows versions are affected.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119971

## From the sources

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_