---
id: "CVE-2026-96112"
page: "https://infrastack.ai/live/CVE-2026-96112"
kind: "vulnerability"
aliases: ["CVE-2026-96112"]
title: "Windows DNS Server: out-of-bounds read leaks memory to a local user"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["dns-server", "infrastructure", "windows"]
not_affected_if: ["no-dns-server-role"]
published_at: "2026-11-10T19:22:09+00:00"
first_seen_at: "2026-11-10T19:25:31+00:00"
updated_at: "2026-11-10T20:00:20+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96112", "first_seen_at": "2026-11-10T19:25:31+00:00"}]
exploit_sources: []
---

# Windows DNS Server: out-of-bounds read leaks memory to a local user

Link for people: https://infrastack.ai/live/CVE-2026-96112 (this .md is for agents)

A flaw in the DNS Server component lets an authorized local attacker read memory outside an intended buffer. The attacker can learn information from the server process, but the sources do not say that code can be run.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-96112

## From the sources

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_