CVE-2026-78523

Use after free in Windows DNS allows an unauthorized attacker to deny service over a network.

• Published Sep 8, 2026
• CVSS 7.5 high
• 1.0% chance of exploitation in the next 30 days (EPSS)
• A fix is available

CVE-2026-78523 at the National Vulnerability Database