Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.
Read the full article at Microsoft Security Response Center →
CVE-2026-109463 Windows DNS Remote Code Execution Vulnerability
About this summary. This is a short excerpt from the description that Microsoft Security Response Center published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109463
Source attribution: headline and facts are from Microsoft Security Response Center (msrc.microsoft.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
CVE-2026-119988 Windows SMB Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-113749 Microsoft Windows Codecs Library Remote Code Execution Vulnerability
Added Microsoft Office software to the Security Updates table. Customers that are running supported version of Microsoft Office are encouraged to update to the indicated…
ZDI-26-967: Microsoft Windows Remote Desktop Connection Client Link Following Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this…
Microsoft Patch Tuesday fixes Outlook flaw already under attack
Microsoft’s November Patch Tuesday fixes more than 1,000 Microsoft vulnerabilities, including an Outlook flaw that attackers are already exploiting to steal…
CVE-2026-68833 Windows NTFS Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
CVE-2026-108411 Microsoft ODBC Driver Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows ODBC Driver allows an unauthorized attacker to execute code over a network.