9.8 CriticalCWE-122
CVE-2026-41096
Microsoft Windows 11 version 23H2 vulnerability
MicrosoftWindows 11 version 23H2
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
1.0%probability of exploitation in the next 30 days
Higher than 62% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network.
Coverage 5 articles · 5 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 12 May · 22:10 UTC | Krebs on Security | Patch Tuesday, May 2026 Edition |
| Wed 13 May · 02:31 UTC | Rapid7 | Microsoft Patch Tuesday patches Netlogon and DNS RCE flaws |
| Wed 13 May · 08:31 UTC | Infosecurity | Microsoft patches 120 bugs, flags critical Netlogon and DNS RCEs |
| Wed 13 May · 12:11 UTC | SOCRadar | May 2026 Patch Tuesday: 137 Vulnerabilities, No Zero-Days |
| Wed 13 May · 12:52 UTC | The Hacker News | Microsoft fixes 138 bugs, flags critical DNS heap overflow |
- Microsoft fixes 138 bugs, flags critical DNS heap overflowThe Hacker News
- May 2026 Patch Tuesday: 137 Vulnerabilities, No Zero-DaysSOCRadar · mentions it in passing
- Microsoft patches 120 bugs, flags critical Netlogon and DNS RCEsInfosecurity · mentions it in passing
- Microsoft Patch Tuesday patches Netlogon and DNS RCE flawsRapid7 · mentions it in passing
- Patch Tuesday, May 2026 EditionKrebs on Security · first in our coverage · mentions it in passing