High severity8.8NVD Advisory· Published Aug 11, 2026· Updated Sep 2, 2026
CVE-2026-62823
CVE-2026-62823
Description
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
Affected products
11cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*+ 1 more
- cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*range: <10.0.14393.9418
- cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*range: <10.0.14393.9418
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*+ 1 more
- cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*range: <10.0.17763.9115
- cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*range: <10.0.17763.9115
cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*range: <6.2.9200.26280
- cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*Range: <10.0.14393.9418
- cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*Range: <10.0.17763.9115
- cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*Range: <10.0.20348.5440
- cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*Range: <10.0.26100.33222
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62823nvdVendor Advisory
News mentions
7- Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026Infosecurity Magazine · Sep 9, 2026
- Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilitiesCisco Talos Intelligence · Aug 11, 2026
- Patch Tuesday - August 2026Rapid7 Blog · Aug 11, 2026
- Microsoft's August 2026 Patch Tuesday addresses 398 CVEs (CVE-2026-68820)Tenable Blog · Aug 11, 2026
- Microsoft Patch Tuesday Update August 2026 – 394 Vulnerabilities Fixed, Including 3 Zero-DaysCyber Security News · Aug 11, 2026
- Microsoft Windows Server DHCP: 14 Vulnerabilities Disclosed Together, Including RCE and Privilege EscalationVypr Intelligence · Aug 11, 2026
- August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEsCrowdStrike Blog