Windows Server DHCP service
by Microsoft
CVEs (74)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-0626 | Cri | 0.69 | 9.8 | 0.69 | Mar 5, 2019 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'. | ||
| CVE-2019-0785 | Cri | 0.68 | 9.8 | 0.50 | Jul 15, 2019 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'. | ||
| CVE-2019-0725 | Cri | 0.66 | 9.8 | 0.28 | May 16, 2019 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Execution Vulnerability'. | ||
| CVE-2026-72979 | Cri | 0.64 | 9.8 | 0.01 | Sep 8, 2026 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69845 | Cri | 0.64 | 9.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2022-30216 | Hig | 0.64 | 8.8 | 0.89 | Jul 12, 2022 | Windows Server Service Tampering Vulnerability | ||
| CVE-2019-1213 | Cri | 0.64 | 9.8 | 0.04 | Aug 14, 2019 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. To exploit the vulnerability, an… | ||
| CVE-2019-1212 | Cri | 0.64 | 9.8 | 0.07 | Aug 14, 2019 | A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding. To exploit the vulnerability, a remote… | ||
| CVE-2026-45602 | Cri | 0.59 | 9.1 | 0.00 | Jun 9, 2026 | No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network. | ||
| CVE-2026-69547 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. | ||
| CVE-2026-69266 | Hig | 0.57 | 8.8 | 0.01 | Sep 8, 2026 | Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-62823 | Hig | 0.57 | 8.8 | 0.01 | Aug 11, 2026 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. | ||
| CVE-2022-38045 | Hig | 0.57 | 8.8 | 0.03 | Oct 11, 2022 | Windows Server Service Elevation of Privilege Vulnerability | ||
| CVE-2022-24541 | Hig | 0.57 | 8.8 | 0.03 | Apr 15, 2022 | Windows Server Service Remote Code Execution Vulnerability | ||
| CVE-2026-69620 | Hig | 0.53 | 8.1 | 0.01 | Sep 8, 2026 | Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69510 | Hig | 0.53 | 8.1 | 0.01 | Sep 8, 2026 | Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-69876 | Hig | 0.52 | 8.0 | 0.01 | Sep 8, 2026 | Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. | ||
| CVE-2026-69847 | Hig | 0.52 | 8.0 | 0.01 | Sep 8, 2026 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. | ||
| CVE-2026-69412 | Hig | 0.52 | 8.0 | 0.01 | Sep 8, 2026 | Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network. | ||
| CVE-2026-62812 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
- risk 0.69cvss 9.8epss 0.69
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
- risk 0.68cvss 9.8epss 0.50
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
- risk 0.66cvss 9.8epss 0.28
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.
- risk 0.64cvss 9.8epss 0.01
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- risk 0.64cvss 9.8epss 0.01
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- risk 0.64cvss 8.8epss 0.89
Windows Server Service Tampering Vulnerability
- risk 0.64cvss 9.8epss 0.04
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. To exploit the vulnerability, an…
- risk 0.64cvss 9.8epss 0.07
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could cause the DHCP server service to stop responding. To exploit the vulnerability, a remote…
- risk 0.59cvss 9.1epss 0.00
No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- risk 0.57cvss 8.8epss 0.01
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
- risk 0.57cvss 8.8epss 0.03
Windows Server Service Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.03
Windows Server Service Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.01
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- risk 0.53cvss 8.1epss 0.01
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
- risk 0.52cvss 8.0epss 0.01
Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
- risk 0.52cvss 8.0epss 0.01
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
- risk 0.52cvss 8.0epss 0.01
Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.
- risk 0.51cvss 7.8epss 0.00
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
Page 1 of 4