DHCP Server Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

Windows DHCP Client Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network...

DHCP Server Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network...

SUSE-SU-2026:2974-1 Security update for dnsmasq

This update for dnsmasq fixes the following issues - CVE-2026-12725: heap buffer overflow in logquery when logging unsupported DS/DNSKEY replies bsc1268764. - CVE-2026-12969: out-of-bounds read in findsoa due to missing extrabytes validation bsc1268882. Changes for dnsmasq: - Update to 2.93: Fix ...

PT-2026-58154

Integer underflow wrap or wraparound in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network...

PT-2026-58042

A flaw has been found in Tenda BE12 Pro 16.03.66.23. The affected element is the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may ...

CVE-2026-50370: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-50518: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-54128: Use After Free

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally...

CVE-2026-56159: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-50683: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-50685: Double Free

Double free in Windows DHCP Server allows an authorized attacker to execute code over a network...

CVE-2026-49181: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-48564: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network...

CVE-2026-58627: Uncontrolled Resource Consumption

Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

Tenda F456 Router fromDhcpListClient Code Execution

The vulnerability of the fromDhcpListClient function in the /goform/DhcpListClient file of the httpd microprogramming system for Tenda F456 routers is related to an out-of-buffer operation in memory when processing the page parameter. Exploiting this vulnerability could allow a remote attacker to...

CVE-2026-61876

LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup. Attackers can send a DHCPv6 Client FQDN containing script tags that execute in the administrator's browser when viewing DHCP lease pages...

CVE-2026-61876 LuCI DHCPv6 Lease Hostname Stored Cross-Site Scripting

LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status tables, allowing adjacent network attackers to inject HTML markup. Attackers can send a DHCPv6 Client FQDN containing script tags that execute in the administrator's browser when viewing DHCP lease pages...

SUSE SLED15 / SLES15 Security Update : dracut (SUSE-SU-2026:2851-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2851-1 advisory. This update for dracut fixes the following issue - CVE-2026-6893: Root code execution via DHCP options command injectio...

Security update for dracut

This update for dracut fixes the following issue CVE-2026-6893: Root code execution via DHCP options command injection bsc1268322. Changes for dracut: Update to version 059+suse.570.g2b84048d7: fixnetwork-legacy: sanitize DHCP values in dhclient-script.sh bsc1268322, CVE-2026-6893...