dhcp security

CVE-2026-50685 exposes the Windows DHCP Server service to remote code execution through a double-free memory error, giving administrators another server-side flaw to address in Microsoft’s July 14, 2026 security updates. Microsoft rates the vulnerability Important with a CVSS 3.1 base score of...

CVE-2026-50518 gives an unauthenticated attacker a potential path to remote code execution on Windows DHCP Server, earning Microsoft’s highest practical CVSS rating of 9.8 Critical. The flaw was disclosed with Microsoft’s July 14, 2026 security updates and should move near the front of...

Microsoft has patched CVE-2026-50370, a critical remote code execution vulnerability in the Windows DHCP Server service that can be triggered by an unauthenticated attacker on an adjacent network. Administrators running DHCP on Windows Server 2012 through Windows Server 2025 should treat the...

Microsoft has patched CVE-2026-48564, a critical remote code execution vulnerability in the Windows DHCP Server service that could let a low-privileged attacker run code across a network. The flaw carries a CVSS 3.1 score of 8.8 and affects supported Windows Server releases from Windows Server...