{"id":"CVE-2026-96112","kind":"vulnerability","aliases":["CVE-2026-96112"],"related":[],"title":"Windows DNS Server: out-of-bounds read leaks memory to a local user","description":"Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.","summary":"A flaw in the DNS Server component lets an authorized local attacker read memory outside an intended buffer. The attacker can learn information from the server process, but the sources do not say that code can be run.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dns-server","infrastructure","windows"],"not_affected_if":["no-dns-server-role"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:22:09+00:00","first_seen_at":"2026-11-10T19:25:31+00:00","triaged_at":"2026-11-10T20:00:20+00:00","updated_at":"2026-11-10T20:00:20+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:00:20Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows DNS Server: out-of-bounds read leaks memory to a local user","impact":"low","summary":"A flaw in the DNS Server component lets an authorized local attacker read memory outside an intended buffer. The attacker can learn information from the server process, but the sources do not say that code can be run.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","dns-server"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Local attacker reads sensitive memory from the DNS server process","analyst_note":"Check the NVD entry and Microsoft's advisory for affected DNS Server versions, the fixed update, and any workaround.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-dns-server-role"],"who_is_affected":"Organizations running the DNS Server role on a server where local users hold authorized accounts. The sources do not name affected versions or configurations. unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000649,"input_tokens":4479,"output_tokens":402,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':16A,19A '-96112':17A,20A 'allow':72C 'attack':37B,45B,75C 'author':35B,74C 'bound':7A,67C 'buffer':43B 'code':60B 'compon':32B 'cve':15A,18A 'disclos':77C 'dns':2A,22B,30B,70C 'dns-server':21B 'flaw':27B 'inform':48B,78C 'infrastructur':24B 'intend':42B 'leak':9A 'learn':47B 'let':33B 'local':13A,36B,79C 'memori':10A,39B 'out-of-bound':4A,64C 'outsid':40B 'process':52B 'read':8A,38B,68C 'run':63B 'say':58B 'server':3A,23B,31B,51B,71C 'sourc':55B 'user':14A 'window':1A,25B","nicknames":[],"mitigations":[],"who_affected":"Organizations running the DNS Server role on a server where local users hold authorized accounts. The sources do not name affected versions or configurations. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dnsserver","infrastructure","medium","windows"],"campaign_type":null,"search_a":"'-2026':16A,19A '-96112':17A,20A 'bound':7A 'cve':15A,18A 'dns':2A 'leak':9A 'local':13A 'memori':10A 'out-of-bound':4A 'read':8A 'server':3A 'user':14A 'window':1A","search_b":"'attack':37B,45B 'author':35B 'buffer':43B 'code':60B 'compon':32B 'dns':22B,30B 'dns-server':21B 'flaw':27B 'inform':48B 'infrastructur':24B 'intend':42B 'learn':47B 'let':33B 'local':36B 'memori':39B 'outsid':40B 'process':52B 'read':38B 'run':63B 'say':58B 'server':23B,31B,51B 'sourc':55B 'window':25B","search_c":"'allow':72C 'attack':75C 'author':74C 'bound':67C 'disclos':77C 'dns':70C 'inform':78C 'local':79C 'out-of-bound':64C 'read':68C 'server':71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:22:09+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96112","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96112","severity":null,"published_at":"2026-11-10T19:22:09+00:00","modified_at":"2026-11-10T19:22:09+00:00","first_seen_at":"2026-11-10T19:25:31+00:00","fetched_at":"2026-11-10T19:25:31+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}