CVE-2019-0726CriticalCVSS 9.8

Windows DHCP Client Remote Code Execution Vulnerability

Published
March 12, 2019
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2019-0726 →

📋 Description

A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine. To exploit the vulnerability, an attacker could send specially crafted DHCP responses to a client. The security update addresses the vulnerability by correcting how Windows DHCP clients handle certain DHCP responses.

🎯 Affected products9

  • Windows 10 Version 1803 for 32-bit Systems
  • Windows 10 Version 1803 for ARM64-based Systems
  • Windows 10 Version 1803 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 10 Version 1809 for ARM64-based Systems
  • Windows 10 Version 1809 for x64-based Systems
  • Windows Server 2019
  • Windows Server 2019 (Server Core installation)
  • Windows Server, version 1803 (Server Core Installation)

✅ Remediation

KB4489868 (Security Update) KB4489899 (Security Update)

🔗 References (4)