CVE-2026-119905
Authenticated network spoofing in Windows DNS
- CVSS 3.1
- 4.9 medium
- EPSS
- 1%p67
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Windows DNS has an improper input validation flaw (path traversal) that lets an authorized attacker with high privileges spoof over the network, with no user interaction. Microsoft has not listed affected builds. A public proof-of-concept is available.
What to do: Apply Microsoft's update for CVE-2026-119905. No workaround is listed.
| Product | Affected |
|---|---|
| Microsoft Windows DNS | — |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Improper input validation in Windows DNS allows an authorized attacker to perform spoofing over a network.
- Weakness
- CWE-22
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
In the news
0 storiesNo ingested article mentions this CVE yet.