Windows DHCP Server vulnerabilities
75 known CVE vulnerabilities in Windows DHCP Server, translated and rated.
- CVE-2026-69405Medium
A missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
- CVE-2026-69342High
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
- CVE-2026-69297Medium
Storing passwords in a recoverable format in the Windows DHCP Server allows an authorized attacker to disclose information over a network.
- CVE-2026-69266High
Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- CVE-2026-62823High
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-62814Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62812High
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-62807High
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-62803High
Improper link resolution before file access in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-62776High
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-62761High
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-62745Medium
An integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62742Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62720Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62718Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62716Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62715Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-62714Medium
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- CVE-2026-58627High
An unauthorized attacker can cause uncontrolled resource consumption in the Windows DHCP Server, leading to a denial of service (DoS) over the network. The vulnerability stems from a lack of limits in processing certain DHCP requests.
- CVE-2026-50685High
A double free vulnerability in Windows DHCP Server allows an authorized attacker to execute code remotely over the network.
- CVE-2026-50683High
A heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network.
- CVE-2026-50370High
A heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
- CVE-2026-48564High
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
- CVE-2026-45634Medium
Out-of-bounds read vulnerability in Windows DHCP Server allows an authorized attacker to disclose information locally.
- CVE-2024-30070High
A vulnerability in the Windows DHCP Server service allows a Denial of Service (DoS) attack. An attacker can send specially crafted DHCP packets, causing the service to crash and preventing IP address assignment to clients.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

