CVE-2020-7461

CVE-2020-7461 FreeBSD 中 DHCP 漏洞 NAME:WRECK 的 PoC 仅供教育目的使用 环境 主机：macOS 11.2.1 Vagrant：2.2.15 受害机：FreeBSD 12.1-STABLE r364849 攻击机：Ubuntu 20.04 免责声明 为防止滥用，此 PoC 会造成 DoS 而非 RCE。 PoC 在 VirtualBox 中关闭 DHCP 服务器 启动虚拟机 $ cd victim $ vagrant up $ cd .. $ cd attacker $ vagrant up $ vagrant ssh...

Rocky Linux 8.8 [CIQ] Security Update: dhcp-client / dhcp-client-debuginfo / dhcp-common / dhcp-devel / etc Multiple Vulnerabilities (ciqsa-2026_0300)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260300 advisory. This advisory aggregates security fixes for the dhcp SRPM in CIQ LTS 8.8. It addresses 3 CVEs: CVE-2023-50868, CVE-2023-4408, CVE-2023-50387. Tenable has...

CVE-2026-102720

A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received message. The option walk keeps a pointer and an offset in step, and the only bound check uses the offset: c / addons/dhcp/nxddhcpclient.c:7538, 7572 / while i...

EUVD-2026-89184

A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received message. The option walk keeps a pointer and an offset in step, and the only bound check uses the offset: c / addons/dhcp/nxddhcpclient.c:7538, 7572 / while i...

CVE-2026-102720

A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received message. The option walk keeps a pointer and an offset in step, and the only bound check uses the offset: c / addons/dhcp/nxddhcpclient.c:7538, 7572 / while i...

CVE-2026-102720

A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received message. The option walk keeps a pointer and an offset in step, and the only bound check uses the offset: c / addons/dhcp/nxddhcpclient.c:7538, 7572 / while i...

Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco ThousandEyes Virtual Appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of DHCP client configuration data. The issue results fro...

CVE-2026-69781

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

CVE-2026-69777

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network...

EUVD-2026-73626

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

CVE-2026-69781

CVE-2026-69781 is a memory management flaw in the Windows DHCP Client , caused by a missing release of memory after its effective lifetime. An unauthorized attacker can exploit this to cause a denial of service over an adjacent network . The CVSS 3.1 score is 6.5 (MEDIUM) with a vector of AV:A/AC...

EUVD-2026-73624

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-69777

CVE-2026-69777 is a heap-based buffer overflow in the Windows DHCP Client that allows an authorized attacker (low privileges required) to elevate privileges over an adjacent network . The vulnerability is rated CVSS 3.1: 8.0 (HIGH) with a vector of AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating ...

Windows DHCP Client Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

Windows DHCP Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-69781: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

PT-2026-87712

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-69777: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network...

PT-2026-87715

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network...

The vulnerability of the Windows DHCP Client service for operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Windows DHCP Client service for operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...