Skip to main content

Severity by source

Vendor (microsoft) PRIMARY
HIGH
qualitative
NVD
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CIRCL (temporal)
6.5 MEDIUM
cvss
vuln.today AI
7.5 HIGH

Remote unauthenticated DHCP traffic with low complexity yields AV:N/AC:L/PR:N/UI:N; pure availability loss gives A:H with C/I:N.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (microsoft).

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

2
Analysis Generated
Jul 14, 2026 - 18:44 vuln.today
CVE Published
Jul 14, 2026 - 17:10 nvd
HIGH 7.5

DescriptionNVD

Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

AnalysisAI

Denial of service in the Microsoft Windows DHCP Server role allows a remote, unauthenticated attacker to exhaust server resources and knock the service offline over the network. The flaw affects a broad range of supported Windows Server releases (2012 through 2025, including Server Core installations) and carries a CVSS 7.5 rating driven entirely by availability impact. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.

Technical ContextAI

The affected component is the DHCP Server service, a core network infrastructure role that dynamically assigns IP addresses and network configuration to clients via the DHCP protocol (UDP ports 67/68). The root cause is classified as CWE-400 (Uncontrolled Resource Consumption), meaning the service fails to properly bound the CPU, memory, or handle resources consumed when processing attacker-supplied DHCP traffic; a crafted stream or malformed request can drive resource usage until the service can no longer respond to legitimate lease requests. CPE data confirms this is Microsoft's server-side DHCP implementation shipped across Windows Server 2012, 2012 R2, 2016, 2019 (plus their Server Core variants) and, per the tag list, Server 2022 and 2025, as well as the DHCP components in Windows 10 Version 1607 and 1809.

RemediationAI

Apply the Microsoft security update for CVE-2026-58627 via the MSRC Update Guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58627; patch status is 'Patch available per vendor advisory,' though no single fixed build number is given in the input, so consult the advisory for the exact KB per OS version. Prioritize patching internet- or perimeter-adjacent DHCP servers first, then internal ones. As compensating controls until patched, restrict UDP 67/68 reachability to trusted VLANs and management networks using firewall or router ACLs (side effect: none for legitimate clients if scoped correctly, but misconfiguration can break DHCP for valid subnets), enable DHCP snooping and rate limiting on switches to throttle abusive request volumes (side effect: aggressive limits may drop bursts during mass client boot storms), and ensure a redundant/failover DHCP server is available so a single service exhaustion does not cause a network-wide outage.

CVE-2026-33824 CRITICAL POC
9.8 Apr 14

Remote code execution in Windows IKE Extension (Internet Key Exchange) via double free memory corruption allows unauthen

CVE-2026-56155 HIGH POC
7.8 Jul 14

Local privilege escalation in Microsoft Active Directory Federation Services (AD FS) lets an already-authenticated low-p

CVE-2026-32202 MEDIUM POC
4.3 Apr 14

Windows Shell protection mechanism failure (CVE-2026-32202) allows remote attackers to perform spoofing attacks over a n

CVE-2026-49798 CRITICAL POC
9.3 Jul 14

Local privilege escalation in the Microsoft Windows Kernel allows an unauthorized attacker to gain elevated (SYSTEM-leve

CVE-2026-54128 HIGH POC
8.4 Jul 14

Local code execution in the Windows DHCP Client service stems from a use-after-free (CWE-416) memory-corruption flaw aff

CVE-2026-50518 CRITICAL
9.8 Jul 14

Remote code execution in the Microsoft Windows DHCP Server role allows an unauthenticated network attacker to run arbitr

CVE-2026-50655 HIGH POC
7.8 Jul 14

Local code execution in the Windows Media component of supported Windows 10, Windows 11, and Windows Server (2016 throug

CVE-2026-54992 HIGH POC
7.8 Jul 14

Local privilege escalation via heap-based buffer overflow in the Windows Message Queuing (MSMQ) Queue Manager component

CVE-2026-50489 HIGH POC
7.8 Jul 14

Local privilege escalation in Microsoft Windows Win32K lets an authenticated low-privileged user corrupt kernel heap mem

CVE-2026-50667 HIGH POC
7.0 Jul 14

Local privilege escalation in the Windows NTFS file system driver lets an authenticated low-privileged user win a race c

CVE-2026-57092 CRITICAL
9.9 Jul 14

Elevation of privilege in the Windows Hyper-V virtual network switch (VMSwitch) lets an authenticated attacker operating

CVE-2026-56190 CRITICAL
9.8 Jul 14

Remote code execution in Microsoft Windows Remote Desktop (RDP) allows an unauthorized network attacker to run arbitrary

Share

CVE-2026-58627 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy