{"id":"CVE-2026-96017","kind":"vulnerability","aliases":["CVE-2026-96017"],"related":[],"title":"Windows DNS Server: use-after-free lets an authorized user crash the service","description":"Use after free in DNS Server allows an authorized attacker to deny service over a network.","summary":"A use-after-free bug in the DNS Server component can be triggered over the network by an authorized attacker. The sources say the result is denial of service, meaning the DNS service stops responding.","severity":"medium","cvss":4.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dns-server","other","self-hosted","windows"],"not_affected_if":["no-dns-server-role"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:21:58+00:00","first_seen_at":"2026-11-10T19:25:27+00:00","triaged_at":"2026-11-10T20:02:50+00:00","updated_at":"2026-11-10T20:02:50+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-10T20:02:50Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows DNS Server: use-after-free lets an authorized user crash the service","impact":"low","summary":"A use-after-free bug in the DNS Server component can be triggered over the network by an authorized attacker. The sources say the result is denial of service, meaning the DNS service stops responding.","audience":"businesses","category":"other","nicknames":[],"who_cares":["windows","dns-server","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"DNS service crashes or stops answering queries for the network","analyst_note":"Check the NVD entry and Microsoft's advisory for affected DNS Server versions, the required privilege level, and the patch.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-dns-server-role"],"who_is_affected":"Organizations running a Microsoft DNS Server role that accepts queries from the network. The sources do not say which DNS Server versions are affected or what configuration is required. Teams not running a DNS Server role can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000657,"input_tokens":4469,"output_tokens":421,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':16A,19A '-96017':17A,20A 'allow':71C 'attack':49B,74C 'author':10A,48B,73C 'bug':34B 'compon':39B 'crash':12A 'cve':15A,18A 'deni':76C 'denial':56B 'dns':2A,22B,37B,61B,69C 'dns-server':21B 'free':7A,33B,67C 'host':27B 'let':8A 'mean':59B 'network':45B,80C 'respond':64B 'result':54B 'say':52B 'self':26B 'self-host':25B 'server':3A,23B,38B,70C 'servic':14A,58B,62B,77C 'sourc':51B 'stop':63B 'trigger':42B 'use':5A,31B,65C 'use-after-fre':4A,30B 'user':11A 'window':1A,28B","nicknames":[],"mitigations":[],"who_affected":"Organizations running a Microsoft DNS Server role that accepts queries from the network. The sources do not say which DNS Server versions are affected or what configuration is required. Teams not running a DNS Server role can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dnsserver","medium","other","selfhosted","windows"],"campaign_type":null,"search_a":"'-2026':16A,19A '-96017':17A,20A 'author':10A 'crash':12A 'cve':15A,18A 'dns':2A 'free':7A 'let':8A 'server':3A 'servic':14A 'use':5A 'use-after-fre':4A 'user':11A 'window':1A","search_b":"'attack':49B 'author':48B 'bug':34B 'compon':39B 'denial':56B 'dns':22B,37B,61B 'dns-server':21B 'free':33B 'host':27B 'mean':59B 'network':45B 'respond':64B 'result':54B 'say':52B 'self':26B 'self-host':25B 'server':23B,38B 'servic':58B,62B 'sourc':51B 'stop':63B 'trigger':42B 'use':31B 'use-after-fre':30B 'window':28B","search_c":"'allow':71C 'attack':74C 'author':73C 'deni':76C 'dns':69C 'free':67C 'network':80C 'server':70C 'servic':77C 'use':65C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:58+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96017","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96017","severity":null,"published_at":"2026-11-10T19:21:58+00:00","modified_at":"2026-11-10T19:21:58+00:00","first_seen_at":"2026-11-10T19:25:27+00:00","fetched_at":"2026-11-10T19:25:27+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}