Windows DHCP Server vulnerabilities
24 known CVE vulnerabilities in Windows DHCP Server, translated and rated.
- CVE-2026-56159Critical
A heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-50518Critical
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-45602Critical
A vulnerability in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network. No CWE identifier is assigned for this issue.
- CVE-2026-62823High
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-62814Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62812High
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-62807High
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-62803High
Improper link resolution before file access in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-62776High
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-62761High
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-62745Medium
An integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62742Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62720Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62718Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62716Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62715Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62714Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-58627High
An unauthorized attacker can cause uncontrolled resource consumption in the Windows DHCP Server, leading to a denial of service (DoS) over the network. The vulnerability stems from a lack of limits in processing certain DHCP requests.
- CVE-2026-50685High
A double free vulnerability in Windows DHCP Server allows an authorized attacker to execute code remotely over the network.
- CVE-2026-50683High
A heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network.
- CVE-2026-50370High
A heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-48564High
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
- CVE-2026-45634Medium
Out-of-bounds read vulnerability in Windows DHCP Server allows an authorized attacker to disclose information locally.
- CVE-2024-30070High
A vulnerability in the Windows DHCP Server service allows a Denial of Service (DoS) attack. An attacker can send specially crafted DHCP packets, causing the service to crash and preventing IP address assignment to clients.

