CVE-2026-44815
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
A stack-based buffer overflow in the Windows DHCP Client allows an unauthorized attacker to execute code over a network.
Risk Assessment
An attacker can remotely execute code on a vulnerable Windows system, potentially leading to system compromise and lateral movement within the network.
Recommendation
Install the latest Windows security updates from Microsoft. If an update is not possible, consider disabling the DHCP client on critical systems.
Other vulnerabilities in Windows DHCP Client
See all- CVE-2026-69781Medium
A missing release of memory after effective lifetime vulnerability in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
- CVE-2026-69777High
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
- CVE-2026-65785Medium
Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
- CVE-2026-62755High
Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
- CVE-2026-62736High
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
- CVE-2026-61361High
Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.
- CVE-2026-54128High
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.
- CVE-2026-49181High
An integer underflow vulnerability in the Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-45608Medium
Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.
Original NVD description (English source)
Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS