Privilege escalation via integer overflow in DNS

Integer overflow in Windows DNS in Microsoft Windows allows local users to elevate privileges via crafted DNS operations. Microsoft has not disclosed the affected function or code path, but the CNA record ties the flaw to integer wraparound in the DNS component that can lead to a heap-based buffer overflow during memory handling. Per Microsoft's CVSS assessment, exploitation requires an existing local foothold with high privileges, so triage centers on multi-user or post-compromise hosts rather than unauthenticated network exposure.