CVE-2026-42304 is a high-severity denial-of-service vulnerability in Twisted’s twisted.names DNS code, disclosed in late April 2026 and tracked by Microsoft’s Security Update Guide, that lets an unauthenticated remote attacker stall vulnerable services with a crafted TCP DNS packet. The bug is...