CVE-2026-45602
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
A vulnerability in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network. No CWE identifier is assigned for this issue.
Risk Assessment
An attacker could modify DHCP configuration, potentially leading to network traffic redirection, man-in-the-middle attacks, or network disruption.
Recommendation
Apply security patches from Microsoft immediately and monitor DHCP traffic for unusual changes.
Other vulnerabilities in Windows DHCP Server
See all- CVE-2026-96934Critical
Windows DHCP Server is affected by a use after free vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-96320Critical
A heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. The vulnerability stems from improper handling of input data.
- CVE-2026-72979Critical
Use-after-free vulnerability in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-69845Critical
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-56159Critical
A heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-50518Critical
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-88171High
Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-88120High
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-88119High
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-88117High
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS