CVE-2026-77498
HighCVSS 7.5Summary
An out-of-bounds read vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over a network.
Risk Assessment
The attack can disrupt DHCP services, preventing clients from obtaining IP addresses and causing network outages.
Recommendation
Apply security updates provided by the vendor and monitor advisories for this vulnerability.
Other vulnerabilities in Windows DHCP Server
See all- CVE-2026-77895High
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
- CVE-2026-77893High
An out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77890High
A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77889High
A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77888High
A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77886High
An out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77502High
An out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77501High
An out-of-bounds read vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-77499High
A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-77494High
A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over a network.
Original NVD description (English source)
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.