CVE-2026-77889
HighCVSS 7.5Summary
A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
Risk Assessment
The attack could crash DHCP services, leading to network disruptions and IP address allocation issues.
Recommendation
Apply the latest Windows security patches to address this vulnerability.
Other vulnerabilities in Windows DHCP Server
See all- CVE-2026-77895High
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
- CVE-2026-77893High
An out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77890High
A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77888High
A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77886High
An out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77502High
An out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over the network.
- CVE-2026-77501High
An out-of-bounds read vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-77499High
A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-77498High
An out-of-bounds read vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over a network.
- CVE-2026-77494High
A type confusion vulnerability in Windows DHCP Server allows an unauthorized attacker to cause a denial of service over a network.
Original NVD description (English source)
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.