CVE-2026-96020

EUVD-2026-121775
Out-of-bounds write in DNS Server allows an authorized attacker to execute code over a network.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Windows Releases
Platform
Version
Windows Server 2016
Server Core
KB5131291
Standard
KB5131291
Windows Server 2019
Server Core
KB5131085
Standard
KB5131085
Windows Server 2022
Server Core
KB5131090
Standard
KB5131090
Windows Server 2025
Server Core
KB5131080
Standard
KB5131080
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96020