CVE-2026-49175

A heap-based buffer overflow vulnerability in Windows DNS enables authorized attackers to escalate their privileges locally, potentially allowing them to execute arbitrary code with elevated permissions. Organizations using affected Windows systems should prioritize patching this vulnerability to mitigate the risk of unauthorized access and control over their environments. Immediate action is recommended for systems that handle sensitive data or critical operations.