---
id: "CVE-2026-96017"
page: "https://infrastack.ai/live/CVE-2026-96017"
kind: "vulnerability"
aliases: ["CVE-2026-96017"]
title: "Windows DNS Server: use-after-free lets an authorized user crash the service"
severity: "medium"
cvss: 4.9
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["dns-server", "other", "self-hosted", "windows"]
not_affected_if: ["no-dns-server-role"]
published_at: "2026-11-10T19:21:58+00:00"
first_seen_at: "2026-11-10T19:25:27+00:00"
updated_at: "2026-11-10T20:02:50+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96017", "first_seen_at": "2026-11-10T19:25:27+00:00"}]
exploit_sources: []
---

# Windows DNS Server: use-after-free lets an authorized user crash the service

Link for people: https://infrastack.ai/live/CVE-2026-96017 (this .md is for agents)

A use-after-free bug in the DNS Server component can be triggered over the network by an authorized attacker. The sources say the result is denial of service, meaning the DNS service stops responding.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-96017

## From the sources

Use after free in DNS Server allows an authorized attacker to deny service over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_