Microsoft Security

Windows Server Zero-Day Can Crash Servers With a Single Packet

Microsoft has patched CVE-2026-70111, a Windows Server zero-day that can let a network-adjacent attacker crash affected servers within seconds using a specially crafted DFS referral response.