cve 2026 48564

The cve 2026 48564 tag covers Microsoft’s July 2026 security update for a critical remote code execution vulnerability in the Windows DHCP Server service. The heap-based buffer overflow, tracked as CWE-122, affects supported Windows Server releases from Windows Server 2012 through Windows Server 2025 and has a CVSS 3.1 score of 8.8. A low-privileged attacker could potentially run code across a network through systems running the DHCP Server role. Microsoft reported no public disclosure or active exploitation and assessed exploitation as less likely, but administrators should prioritize the July update when reviewing affected server environments and patching plans.ರ್ಧ