{"id":"CVE-2026-96179","aliases":[],"cve":{"records":[{"id":"CVE-2026-96179","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T18:48:47.470Z","published":"2026-11-10T18:16:37.410Z","modified":"2026-11-13T18:05:29.018Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-11-13T18:05:29.018Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-11T00:27:13.293Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96179","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-416","description":"CWE-416: Use After Free","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.14393.0","versionEndExcluding":"10.0.14393.9688"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.14393.0","versionEndExcluding":"10.0.14393.9688"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.17763.0","versionEndExcluding":"10.0.17763.9487"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.17763.0","versionEndExcluding":"10.0.17763.9487"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.20348.0","versionEndExcluding":"10.0.20348.5870"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.26100.0","versionEndExcluding":"10.0.26100.33822"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.26100.0","versionEndExcluding":"10.0.26100.33822"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-11T00:24:05.954836Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Windows DNS Elevation of Privilege Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Use after free in DNS Server allows an authorized attacker to elevate privileges locally.","score":6.7,"severity":"medium","published":"2026-11-10T18:16:37.410Z","modified":"2026-11-13T18:05:29.018Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Windows Server 2016","platforms":["x64-based Systems"],"versions":[{"version":"10.0.14393.0","status":"affected","lessThan":"10.0.14393.9688","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96179"},{"vendor":"Microsoft","name":"Windows Server 2016 (Server Core installation)","platforms":["x64-based Systems"],"versions":[{"version":"10.0.14393.0","status":"affected","lessThan":"10.0.14393.9688","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96179"},{"vendor":"Microsoft","name":"Windows Server 2019","platforms":["x64-based Systems"],"versions":[{"version":"10.0.17763.0","status":"affected","lessThan":"10.0.17763.9487","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96179"},{"vendor":"Microsoft","name":"Windows Server 2019 (Server Core installation)","platforms":["x64-based Systems"],"versions":[{"version":"10.0.17763.0","status":"affected","lessThan":"10.0.17763.9487","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96179"},{"vendor":"Microsoft","name":"Windows Server 2022","platforms":["x64-based Systems"],"versions":[{"version":"10.0.20348.0","status":"affected","lessThan":"10.0.20348.5870","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96179"},{"vendor":"Microsoft","name":"Windows Server 2025","platforms":["x64-based Systems"],"versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.33822","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96179"},{"vendor":"Microsoft","name":"Windows Server 2025 (Server Core installation)","platforms":["x64-based Systems"],"versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.33822","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-96179"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96179"],"sources":[{"name":"CVE","id":"CVE-2026-96179","modified":"2026-11-13T18:05:29.018Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-96179"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","score":6.7}],"sourceAffected":[],"observedAt":"2026-11-13T19:29:23.140Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T02:45:32.518Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-11T11:10:34.754Z","attemptedAt":"2026-11-11T11:10:34.754Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-11T11:10:35.068Z","attemptedAt":"2026-11-11T11:10:35.068Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-11T11:10:35.297Z","attemptedAt":"2026-11-11T11:10:35.297Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-11T11:10:34.619Z","attemptedAt":"2026-11-11T11:10:34.619Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-96179","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96179","modified":"2026-11-11T01:17:44.110","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-11T11:10:34.754Z"},{"source":"GitHub Advisory Database","id":"GHSA-wmcw-24qm-32pc","url":"https://github.com/advisories/GHSA-wmcw-24qm-32pc","modified":"2026-11-10T21:34:28Z","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-11T11:10:35.068Z"},{"source":"ENISA EUVD","id":"EUVD-2026-121500","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-121500","modified":"Nov 11, 2026, 12:27:13 AM","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","checkedAt":"2026-11-11T11:10:35.297Z"}],"aiSummary":{"text":"A use-after-free weakness in the DNS Server of Windows Server 2016, 2019, 2022, and 2025 allows an authorized attacker to elevate privileges locally. The affected versions are prior to 10.0.14393.9688, 10.0.17763.9487, 10.0.20348.5870, and 10.0.26100.33822 respectively.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T03:21:07.542Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-96179"}]}}