cve 2026 50370

The cve 2026 50370 tag covers reporting on a critical remote code execution vulnerability in the Windows DHCP Server service. Microsoft patched the heap-based buffer overflow in its July 14, 2026 security updates. The flaw results from improper input validation and can be triggered by an unauthenticated attacker on an adjacent network. Administrators using DHCP on Windows Server 2012 through Windows Server 2025 are advised to prioritize deployment rather than defer the update to a routine maintenance window. Coverage also records Microsoft’s CVSS 3.1 score of 8.8 and its assessment that exploitation is more likely, making this tag relevant to Windows Server security and patch management.