Nov 2026: Windows DNS Remote Code Execution Vulnerability
CVE-2026-109463 Published on November 10, 2026

Windows DNS Remote Code Execution Vulnerability
Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute code over a network.

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:

NONE

Automatable:

NO

Technical Impact:

TOTAL

Weakness Type

What is a Marshaling, Unmarshaling Vulnerability?

The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

CVE-2026-109463 has been classified to as a Marshaling, Unmarshaling vulnerability or weakness.

Products Associated with CVE-2026-109463

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft Windows Server 2012

  Watch

Microsoft Windows Server 2012 R2

  Watch

Microsoft Windows 10

  Watch

Microsoft Windows Server 2016

  Watch

Microsoft Windows Server 2019

  Watch

Microsoft Windows Server 2022

  Watch

Microsoft Windows 11 23h2

  Watch

Microsoft Windows 11 24h2

  Watch

Microsoft Windows 11 25h2

  Watch

Microsoft Windows 11 Version 26h2 Arm64 Based Systems

  Watch

Microsoft Windows Server 2025

  Watch

Microsoft Windows 11 26h1

  Watch

Affected Versions

• Version 10.0.14393.0 and below 10.0.14393.9612 is affected.

• Version 10.0.17763.0 and below 10.0.17763.9376 is affected.

• Version 10.0.19044.0 and below 10.0.19044.7807 is affected.

• Version 10.0.19045.0 and below 10.0.19045.7807 is affected.

• Version 10.0.22631.0 and below 10.0.22631.7652 is affected.

• Version 10.0.22631.0 and below 10.0.22631.7652 is affected.

• Version 10.0.26100.0 and below 10.0.26100.9711 is affected.

• Version 10.0.26200.0 and below 10.0.26200.9711 is affected.

• Version 10.0.28000.0 and below 10.0.28000.3231 is affected.

• Version 10.0.26300.0 and below 10.0.26300.9711 is affected.

• Version 6.2.9200.0 and below 6.2.9200.26434 is affected.

• Version 6.2.9200.0 and below 6.2.9200.26434 is affected.

• Version 6.3.9600.0 and below 6.3.9600.23470 is affected.

• Version 6.3.9600.0 and below 6.3.9600.23470 is affected.

• Version 10.0.14393.0 and below 10.0.14393.9612 is affected.

• Version 10.0.14393.0 and below 10.0.14393.9612 is affected.

• Version 10.0.17763.0 and below 10.0.17763.9376 is affected.

• Version 10.0.17763.0 and below 10.0.17763.9376 is affected.

• Version 10.0.20348.0 and below 10.0.20348.5761 is affected.

• Version 10.0.26100.0 and below 10.0.26100.33650 is affected.

• Version 10.0.26100.0 and below 10.0.26100.33650 is affected.

Exploit Probability