CVE-2026-41096

CVE-2026-41096 - PoC de Crash Desbordamiento de montón en DnsRawTruncateMessageForUdp dnsapi.dll. Una respuesta DNS manipulada con QDCOUNT=0 y un registro OPT grande provoca un desbordamiento de montón de 604 bytes cuando la lógica de truncamiento calcula mal el puntero de destino. Aviso de MSRC:...

CVE-2026-41096-POC

the bug is at DnsQueryRaw function to be specific, inside DnsRawTruncateMessageForUdp so you need a program to call it. I could be wrong, but currently there isnt a service or default program in windows 11 that use this function, thats why i needed client.c. this repo has 2 files, client.c and...