windows dns

CVE-2026-42923 is a medium-severity DNSSEC validation flaw disclosed in May 2026 affecting NLnet Labs Unbound through version 1.25.0, where specially crafted NSEC3 records can force excessive hash calculations and degrade resolver availability over the network. It is not the sort of bug that...

CVE-2026-42959 is a denial-of-service vulnerability disclosed in May 2026 in NLnet Labs Unbound, where malicious upstream DNSSEC validation content can crash the resolver and interrupt DNS service for clients that depend on it. The practical story is not remote code execution or data theft; it...

Microsoft’s May 12, 2026 Patch Tuesday fixes CVE-2026-41096, a critical Windows DNS Client remote code execution vulnerability rated CVSS 9.8 that affects supported Windows client and server systems and can be triggered over the network without authentication or user interaction. That is the dry...

CVE-2026-41096 is a Microsoft-listed Windows DNS Client remote code execution vulnerability published in the MSRC Security Update Guide, affecting the Windows component that resolves domain names for client systems and requiring administrators to assess exposure through Microsoft’s May 12, 2026...