CVE-2026-41096

Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.93% chance of exploitation in the next 30 days, 79th percentile

Published

2026-05-12

Updated

2026-08-10

Proof-of-concept exploits (3)

• satchfunky/CVE-2026-41096-POC38★ · 2026-05-24
• TwoSevenOneT/CVE-2026-41096-Attack-Surface15★ · 2026-06-04
• m0n1x90/CVE-2026-410963★ · 2026-05-24

References

• CVE Record
• NVD entry

Related

• CVE-2026-41091
• CVE-2026-4110
• CVE-2026-41089
• CVE-2026-4112
• CVE-2026-41068
• CVE-2026-41130