EUVD-2026-56354
GHSA-fh82-hxh6-p67f
Severity by source
AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Adjacent vector reflects same-segment DHCP network requirement; PR:N confirmed by 'unauthorized attacker' in description; C:H for memory disclosure; no integrity or availability impact applies.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
AnalysisAI
Information disclosure via integer underflow in the Windows DHCP Server service exposes server process memory to unauthenticated attackers on the same network segment, affecting Windows Server 2012 through 2025 and Windows 10 versions 1607 and 1809 where the DHCP Server role is installed. The root cause is a CWE-125 out-of-bounds read triggered when an integer underflows and wraps around, causing DHCP packet-processing code to read memory outside intended bounds and potentially return it in a server response. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the target system have the Windows DHCP Server role explicitly installed and actively running - this role is not enabled by default on any Windows Server or Windows 10 edition and must be deliberately configured by an administrator. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) scores 6.5 Medium, reflecting high confidentiality impact with no integrity or availability loss, requiring no authentication and no user interaction, but constrained to the adjacent network. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft-released patches via Windows Update, WSUS, or Microsoft Update Catalog to bring affected systems to or above the following fixed build versions: Windows Server 2012 and Server Core to 6.2.9200.26279 or later; Windows Server 2012 R2 and Server Core to 6.3.9600.23337 or later; Windows Server 2016, Server Core, and Windows 10 Version 1607 to 10.0.14393.9418 or later; Windows Server 2019, Server Core, and Windows 10 Version 1809 to 10.0.17763.9115 or later; Windows Server 2022 to 10.0.20348.5499 or later; Windows Server 2025 and Server Core to 10.0.26100.33296 or later. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Windows 10 1607
View allWindows MSHTML component contains a remote code execution vulnerability that allows attackers to craft malicious ActiveX
<p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged fi
Windows MSDT (Microsoft Support Diagnostic Tool) allows remote code execution when called via the ms-msdt URL protocol f
The Windows VBScript engine contains a remote code execution vulnerability in object handling that allows full system co
Windows Print Spooler Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no auth
Windows Search Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely explo
Denial of service against HTTP/2 server implementations allows remote unauthenticated attackers to exhaust server resour
Windows Kernel contains a TOCTOU race condition vulnerability allowing local privilege escalation, exploited by the OilR
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in
Windows Internet Shortcut Files (.url) contain an external control vulnerability (CVE-2025-33053, CVSS 8.8) that enables
Elevation of privilege in the Windows Win32k kernel-mode driver allows a local, low-privileged attacker to escalate to S
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today