CVE-2026-70250
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
A use after free in the Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
Risk Assessment
An attacker on the same local network could remotely execute code on the vulnerable system without authentication, potentially compromising it.
Recommendation
Install the latest Windows updates and segment the network to limit access from adjacent networks.
Other vulnerabilities in Windows DHCP Client
See all- CVE-2026-44815Critical
A stack-based buffer overflow in the Windows DHCP Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-83677High
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.
- CVE-2026-69781Medium
A missing release of memory after effective lifetime vulnerability in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
- CVE-2026-69777High
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.
- CVE-2026-65785Medium
Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
- CVE-2026-62755High
Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
- CVE-2026-62736High
Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
- CVE-2026-61361High
Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.
- CVE-2026-54128High
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.
- CVE-2026-49181High
An integer underflow vulnerability in the Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.
Original NVD description (English source)
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

