CVE-2026-70250CriticalCVSS 8.8
Windows DHCP Client Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.
🎯 Affected products12
- Windows Server 2012
- Windows Server 2012 (Server Core installation)
- Windows Server 2012 R2
- Windows Server 2012 R2 (Server Core installation)
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server 2022
- Windows Server 2022 (Server Core installation)
- Windows Server 2025
- Windows Server 2025 (Server Core installation)
✅ Remediation
KB5126835 (Security Update) — fixed build 6.2.9200.26434 KB5126836 (Security Update) — fixed build 6.3.9600.23470 KB5126868 (Security Update) — fixed build 10.0.14393.9612 KB5126651 (Security Update) — fixed build 10.0.17763.9376 KB5126655 (Security Update) — fixed build 10.0.20348.5761 KB5126646 (Security Update) — fixed build 10.0.26100.33650
🔗 References (13)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70250
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835
- referencehttps://support.microsoft.com/help/5126835
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836
- referencehttps://support.microsoft.com/help/5126836
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868
- referencehttps://support.microsoft.com/help/5126868
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651
- referencehttps://support.microsoft.com/help/5126651
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655
- referencehttps://support.microsoft.com/help/5126655
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646
- referencehttps://support.microsoft.com/help/5126646