CVE-2026-45602
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
A vulnerability in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network. No CWE identifier is assigned for this issue.
Risk Assessment
An attacker could modify DHCP configuration, potentially leading to network traffic redirection, man-in-the-middle attacks, or network disruption.
Recommendation
Apply security patches from Microsoft immediately and monitor DHCP traffic for unusual changes.
Other vulnerabilities in Windows DHCP Server
See all- CVE-2026-72979Critical
Use-after-free vulnerability in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-69845Critical
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-56159Critical
A heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-50518Critical
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-77895High
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
- CVE-2026-77893High
An out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77891Medium
Out-of-bounds read in Windows DHCP Server allows an authenticated attacker to execute code locally.
- CVE-2026-77890High
A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77889High
A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77888High
A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
Original NVD description (English source)
No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS