Windows Server DHCP service
by Microsoft
CVEs (74)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-1031 | Hig | 0.49 | 7.5 | 0.05 | Sep 11, 2020 | An information disclosure vulnerability exists in the way that the Windows Server DHCP service improperly discloses the contents of its memory. To exploit the vulnerability, an unauthenticated attacker could send a specially crafted packet to an affected DHCP server. … | ||
| CVE-2019-1206 | Hig | 0.49 | 7.5 | 0.05 | Aug 14, 2019 | A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server. An attacker who successfully exploited the vulnerability could cause the DHCP service to become nonresponsive. To exploit the… | ||
| CVE-2026-69415 | Med | 0.44 | 6.8 | 0.01 | Sep 8, 2026 | Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-45608 | Med | 0.44 | 6.8 | 0.00 | Jun 9, 2026 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally. | ||
| CVE-2026-77891 | Med | 0.42 | 6.4 | 0.00 | Sep 8, 2026 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. | ||
| CVE-2026-77887 | Med | 0.42 | 6.4 | 0.00 | Sep 8, 2026 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally. | ||
| CVE-2026-69878 | Med | 0.42 | 6.4 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally. | ||
| CVE-2026-69497 | Med | 0.42 | 6.5 | 0.01 | Sep 8, 2026 | Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network. | ||
| CVE-2026-69297 | Med | 0.42 | 6.5 | 0.01 | Sep 8, 2026 | Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-62814 | Med | 0.42 | 6.5 | 0.01 | Aug 11, 2026 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | ||
| CVE-2026-62745 | Med | 0.42 | 6.5 | 0.01 | Aug 11, 2026 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | ||
| CVE-2026-62742 | Med | 0.42 | 6.5 | 0.01 | Aug 11, 2026 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | ||
| CVE-2026-62720 | Med | 0.42 | 6.5 | 0.01 | Aug 11, 2026 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | ||
| CVE-2026-62718 | Med | 0.42 | 6.5 | 0.01 | Aug 11, 2026 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | ||
| CVE-2026-62716 | Med | 0.42 | 6.5 | 0.01 | Aug 11, 2026 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | ||
| CVE-2026-62715 | Med | 0.42 | 6.5 | 0.01 | Aug 11, 2026 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | ||
| CVE-2026-62714 | Med | 0.42 | 6.5 | 0.01 | Aug 11, 2026 | Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network. | ||
| CVE-2022-26936 | Med | 0.42 | 6.5 | 0.03 | May 10, 2022 | Windows Server Service Information Disclosure Vulnerability | ||
| CVE-2026-70124 | Med | 0.38 | 5.9 | 0.01 | Sep 8, 2026 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-69930 | Med | 0.38 | 5.9 | 0.01 | Sep 8, 2026 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network. |
- risk 0.49cvss 7.5epss 0.05
An information disclosure vulnerability exists in the way that the Windows Server DHCP service improperly discloses the contents of its memory. To exploit the vulnerability, an unauthenticated attacker could send a specially crafted packet to an affected DHCP server. …
- risk 0.49cvss 7.5epss 0.05
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP failover server. An attacker who successfully exploited the vulnerability could cause the DHCP service to become nonresponsive. To exploit the…
- risk 0.44cvss 6.8epss 0.01
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network.
- risk 0.44cvss 6.8epss 0.00
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to disclose information locally.
- risk 0.42cvss 6.4epss 0.00
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
- risk 0.42cvss 6.4epss 0.00
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
- risk 0.42cvss 6.4epss 0.00
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.
- risk 0.42cvss 6.5epss 0.01
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over a network.
- risk 0.42cvss 6.5epss 0.01
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network.
- risk 0.42cvss 6.5epss 0.01
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- risk 0.42cvss 6.5epss 0.01
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- risk 0.42cvss 6.5epss 0.01
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- risk 0.42cvss 6.5epss 0.01
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- risk 0.42cvss 6.5epss 0.01
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- risk 0.42cvss 6.5epss 0.01
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- risk 0.42cvss 6.5epss 0.01
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- risk 0.42cvss 6.5epss 0.01
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
- risk 0.42cvss 6.5epss 0.03
Windows Server Service Information Disclosure Vulnerability
- risk 0.38cvss 5.9epss 0.01
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
- risk 0.38cvss 5.9epss 0.01
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
Page 3 of 4