CVE-2026-49181
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
An integer underflow vulnerability in the Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.
Risk Assessment
An attacker can remotely elevate privileges on the network, potentially leading to full compromise of sensitive systems and data.
Recommendation
Apply the security update provided by the vendor immediately and monitor the network for suspicious exploitation attempts.
Other vulnerabilities in Windows DHCP Client
See all- CVE-2026-44815Critical
A stack-based buffer overflow in the Windows DHCP Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-65785Medium
Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
- CVE-2026-62755High
Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
- CVE-2026-62736High
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
- CVE-2026-61361High
Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.
- CVE-2026-54128High
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.
- CVE-2026-45608Medium
Out-of-bounds read in Windows DHCP Client allows an unauthorized attacker to disclose information locally.
Original NVD description (English source)
Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.