EUVD-2026-56322

Use after free in Windows DHCP Client allows an authorized attacker to execute code locally...

Windows DHCP Client Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally...

Windows DHCP Client Denial of Service Vulnerability

Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

Windows DHCP Client Remote Code Execution Vulnerability

Use after free in Windows DHCP Client allows an authorized attacker to execute code locally...

Windows DHCP Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally...

PT-2026-70432

Name of the Vulnerable Software and Affected Versions Windows DHCP Client affected versions not specified Description A use after free condition exists in the Windows DHCP Client. This allows an authorized attacker to execute arbitrary code locally or a remote attacker to execute arbitrary code a...

PT-2026-70680

Name of the Vulnerable Software and Affected Versions Windows DHCP Client affected versions not specified Description Uncontrolled resource consumption in the Windows DHCP Client allows an unauthorized attacker to cause a denial of service over an adjacent network. Recommendations At the moment,...

PT-2026-70497

Name of the Vulnerable Software and Affected Versions Windows DHCP Client affected versions not specified Description A heap-based buffer overflow occurs in the Windows DHCP Client, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

PT-2026-70515

Name of the Vulnerable Software and Affected Versions Windows DHCP Client affected versions not specified Description A stack-based buffer overflow occurs in the Windows DHCP Client, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition...

CVE-2026-54128

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally...

CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability

...

CVE-2026-54128

CVE-2026-54128 is a Windows DHCP Client use-after-free vulnerability that could allow an unauthenticated local attacker to execute code. The issue, described in the NVD entry and echoed by TALOS, affects the Windows DHCP Client component and is known to have been exploited in the wild (per CIRCL ...

CVE-2026-50683 Windows DHCP Client Elevation of Privilege Vulnerability

...

CVE-2026-50683

CVE-2026-50683 is a Windows DHCP Client/Server heap-based buffer overflow that enables an authenticated attacker on an adjacent network to elevate privileges. Public details in the initial entry cite a heap-based overflow and adjacent-access attack path with high impact (C:H, I:H, A:H) and a CVSS...

CVE-2026-49181

CVE-2026-49181 is a Windows DHCP Client vulnerability described as an integer underflow (wrap or wraparound) that allows an unauthenticated attacker to elevate privileges over a network. The CVE is corroborated by multiple sources in Connected documents, including NVD and MSRC updates, and ENISA/...

CVE-2026-49181 Windows DHCP Client Elevation of Privilege Vulnerability

...

Windows DHCP Client Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-14258

A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage and later be reparsed without adequate validation, causing the parser ...

PT-2026-54641

Name of the Vulnerable Software and Affected Versions dhcpcd affected versions not specified Description A flaw exists in the IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass...

CVE-2026-56117

dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger memory corruption when privilege separation is disabled. Attackers can connect to the control socket...