CVE-2026-96177
A NVD · · CVE-2026-96177
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key metrics
- CVSS
- 8.1
- EPSS
- 0%
Key insight
The report describes a critical RCE vulnerability in Windows DNS Server for which no active exploitation or PoC availability has been documented so far.
Description
CVE-2026-96177 is a use-after-free vulnerability in Microsoft Windows DNS Server. An unauthenticated attacker can exploit it over the network to execute arbitrary code. Affected are Windows Server systems providing the DNS service. At the time of reporting, there is no information on active exploitation, public exploits, or inclusion in the CISA KEV list.
Risk score
- cvss base
- 81.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 0.00
- raw before weight
- 81.00
- industry weight
- 1.21
- freshness factor
- 1.00
- exploitability factor
- 1.00
- days old
- 0.00
- vendor mismatch penalty
- 0.00
- consensus penalty
- -3.00
Path: operational
Consensus check
The pipeline self-checks before delivery. These rules lowered the score:
-
TTP_SKIPPEDTTP mapping skipped (placeholder or aggregation article) −3
- Consensus penalty:
- −3.0
- Total penalty:
- −3.0