cve 2026 54128

The cve 2026 54128 tag covers Microsoft’s critical security update for a use-after-free vulnerability in the Windows DHCP Client. CVE-2026-54128 can enable arbitrary code execution without attacker privileges or user interaction, and affects Windows 10, Windows 11, and Windows Server releases from Server 2012 through Server 2025. Microsoft published the fix in the July 14, 2026 Patch Tuesday updates and assigned the flaw a CVSS 3.1 base score of 8.4. This archive provides focused coverage of the vulnerability, its affected Windows and server environments, Microsoft’s assessment that exploitation is more likely, and the priority of applying the relevant security updates.