cve-2026-77886

CVE-2026-77886 is an Important Windows DHCP Server denial-of-service vulnerability addressed in Microsoft's September 22, 2026 security release. Microsoft classifies the flaw as an out-of-bounds read with a 7.5 CVSS base score, and an unauthorized attacker can deny service over a network, so the practical concern is DHCP service availability rather than desktop impact. The tagged discussion covers the affected Windows 10 and Windows Server installations, the matching KB, and the prescribed fixed build that administrators must verify. Because Microsoft states customer action is required, patching is framed as a DHCP infrastructure maintenance priority for IT teams managing enterprise networks.