Use of uninitialized resource in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 10 Nov 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Use of uninitialized resource in Windows DNS allows an unauthorized attacker to execute code over an adjacent network. | |
| Title | Windows DNS Remote Code Execution Vulnerability | |
| First Time appeared |
Microsoft
Microsoft windows Server 2025 |
|
| Weaknesses | CWE-908 | |
| CPEs | cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Microsoft
Microsoft windows Server 2025 |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: microsoft
Published:
Updated: 2026-11-10T18:19:07.710Z
Reserved: 2026-10-20T19:03:07.282Z
Link: CVE-2026-113855
No data.
No data.
No data.
OpenCVE Enrichment
No data.
Weaknesses