Microsoft Windows DNS Heap-Based Buffer Overflow Vulnerability Allowing Privilege Escalation

A heap-based buffer overflow vulnerability has been identified in Microsoft Windows DNS. This vulnerability allows an authorized attacker to locally elevate privileges. It affects multiple Windows versions, including various editions of Windows Server and Windows 10, as well as Windows 11.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can download the security update for this vulnerability through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5094123, KB5094122, KB5094126, KB5095051, KB5094041, KB5094042, KB5094125, KB5094128, and KB5093998.