CVE-2026-45608
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.
Risk Assessment
The risk involves the possibility of local disclosure of sensitive data by an unauthorized attacker, which could lead to privilege escalation or further attacks.
Recommendation
It is recommended to apply the appropriate security update from Microsoft that fixes the out-of-bounds read vulnerability in the DHCP Client.
Other vulnerabilities in Windows DHCP Client
See all- CVE-2026-44815Critical
A stack-based buffer overflow in the Windows DHCP Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-65785Medium
Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
- CVE-2026-62755High
Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
- CVE-2026-62736High
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
- CVE-2026-61361High
Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.
- CVE-2026-54128High
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.
- CVE-2026-49181High
An integer underflow vulnerability in the Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.
Original NVD description (English source)
Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.