282 matches found
CVE-2026-69405
CVE-2026-69405 is a memory leak in Windows DHCP Server , specifically a missing release of memory after its effective lifetime. An attacker with low privileges on an adjacent network can trigger a denial of service by exhausting server resources. The CVSS 3.1 score is 5.7 (MEDIUM) with the vector...
EUVD-2026-73490
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
CVE-2026-69342
Windows DHCP Server is affected by an out-of-bounds read vulnerability (CVE-2026-69342) that allows an unauthenticated, remote attacker to cause a denial of service . The CVSS v3.1 score is 7.5 (HIGH) with an attack vector of Network, low complexity, no privileges required, and high availability ...
EUVD-2026-73463
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
CVE-2026-69297
CVE-2026-69297 affects Windows DHCP Server , where passwords are stored in a recoverable format, allowing an authorized attacker (with low privileges) to disclose information over a network. The CVSS v3.1 score is 6.5 (MEDIUM) with high confidentiality impact and no integrity or availability impa...
EUVD-2026-73437
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...
CVE-2026-69266
CVE-2026-69266 is an integer overflow or wraparound vulnerability in Windows DHCP Server that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 base score is 8.8 (High) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. CISA's SSVC assessment rates...
EUVD-2026-73423
Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
EUVD-2026-73338
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
CVE-2026-70065
CVE-2026-70065 affects the Windows DHCP Server , where a missing release of memory after its effective lifetime allows an unauthorized, network-based attacker to cause a denial of service with no impact to confidentiality or integrity. The CVSS 3.1 score is 7.5 (HIGH) with low attack complexity a...
EUVD-2026-73284
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
CVE-2026-77895
CVE-2026-77895 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an unauthorized attacker to cause denial of service over a network . The CVSS 3.1 score is 7.5 (HIGH) with a vector of network access, low complexity, no privileges required, and no user interaction, resultin...
CVE-2026-77893
CVE-2026-77893 is an out-of-bounds read in Windows DHCP Server that allows an unauthorized, remote attacker to cause a denial of service over the network. The CVSS 3.1 base score is 7.5 (High) , with a vector of network attack, low complexity, no privileges required, no user interaction, and high...
EUVD-2026-73282
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
EUVD-2026-73280
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally...
CVE-2026-77891
CVE-2026-77891 is an out-of-bounds read vulnerability in Windows DHCP Server that allows an authorized attacker to achieve local code execution . The CVSS 3.1 score is 6.4 (MEDIUM) with a vector of AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating a local attack requiring high complexity and high p...
EUVD-2026-73278
Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
CVE-2026-77890
CVE-2026-77890 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, remote attacker to trigger a denial of service over a network. The flaw stems from access of a resource using an incompatible type. Per the CVSS 3.1 score of 7.5 (HIGH) , the attack requires no pr...
CVE-2026-77889
CVE-2026-77889 is a type confusion vulnerability in Windows DHCP Server that allows an unauthorized, network-based attacker to cause a denial of service . The CVSS 3.1 score is 7.5 (High) , with no privileges or user interaction required. CISA's SSVC assessment rates exploitation as none , the vu...