---
id: "CVE-2026-97006"
page: "https://infrastack.ai/live/CVE-2026-97006"
kind: "vulnerability"
aliases: ["CVE-2026-97006"]
title: "Windows DNS: out-of-bounds read lets an authorized attacker leak memory"
severity: "medium"
cvss: 4.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["dns-server", "infrastructure", "windows"]
not_affected_if: ["no-windows-dns-server"]
published_at: "2026-11-10T19:22:23+00:00"
first_seen_at: "2026-11-10T19:25:34+00:00"
updated_at: "2026-11-10T20:02:41+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97006", "first_seen_at": "2026-11-10T19:25:34+00:00"}]
exploit_sources: []
---

# Windows DNS: out-of-bounds read lets an authorized attacker leak memory

Link for people: https://infrastack.ai/live/CVE-2026-97006 (this .md is for agents)

A memory read past the end of a buffer in Windows DNS lets an attacker who already has authorized access over the network read data from the server's memory. The sources give no more detail on what data is exposed.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the Windows Server build with `winver` or `Get-ComputerInfo` and compare it to the patched build in Microsoft's security update guide
- Confirm whether the DNS Server role is installed with `Get-WindowsFeature DNS`

## Timeline

- 2026-11-10T19:25:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-97006

## From the sources

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_