Vulnerabilities

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Microsoft

Product

Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019

CVSS v3.1

4.9 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness

CWE-125

Exposure class

Operating system

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-96985 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 29
   CVE NVD 4h ago

   Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

   CVSS 4.9 CVE-2026-97006 Microsoft
2. 35
   CVE NVD 4h ago

   Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

   CVSS 4.9 CVE-2026-96988 Microsoft
3. 35
   CVE NVD 4h ago

   Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

   CVSS 4.9 CVE-2026-96987 Microsoft
4. 35
   CVE NVD 4h ago

   Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

   CVSS 4.9 CVE-2026-96986 Microsoft
5. 29
   CVE NVD 4h ago

   Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

   CVSS 4.9 CVE-2026-96984 Microsoft
6. 29
   CVE NVD 4h ago

   Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

   CVSS 4.9 CVE-2026-96980 Microsoft
7. 35
   CVE NVD 4h ago

   Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

   CVSS 4.9 CVE-2026-96976 Microsoft
8. 29
   CVE NVD 4h ago

   Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.

   CVSS 5.9 CVE-2026-96975 Microsoft
9. 35
   CVE NVD 4h ago

   Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

   CVSS 4.9 CVE-2026-96970 Microsoft
10. 29
    CVE NVD 4h ago

    Out-of-bounds read in Windows WLAN Service allows an unauthorized attacker to deny service over an adjacent network.

    CVSS 6.5 CVE-2026-96086 Microsoft
11. 42
    CVE NVD 4h ago

    Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

    CVSS 6.5 CVE-2026-96082 Microsoft