EUVD-2026-73532
GHSA-8j3p-wjr9-48ff
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Network-reachable DHCP service with low-privilege authorization requirement and full C/I/A impact; AC:L reflects straightforward overflow with no race condition or special constraint.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.
AnalysisAI
Heap-based buffer overflow in Windows DHCP Server allows a network-authenticated attacker with low privileges to achieve remote code execution across all major Windows Server releases. The vulnerability (CWE-122) is triggered via crafted DHCP protocol input to the server service, with CVSS 8.8 reflecting the high-impact, network-reachable, low-complexity exploitation path. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires: (1) network connectivity to a host running the Windows DHCP Server role (UDP/67 or related management port), and (2) low-level authenticated/authorized network access - the CVSS PR:L designation and the description's use of 'authorized attacker' indicate some form of credential or authorization is required, though the exact mechanism is not specified in the provided data. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.8 score accurately reflects the real-world risk profile: network-reachable, low-complexity, with full C/I/A impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the Microsoft-released cumulative security updates for each affected build: Windows Server 2025 to build 10.0.26100.33438 or later, Windows Server 2022 to 10.0.20348.5622 or later, Windows Server 2019 to 10.0.17763.9245 or later, Windows Server 2016 to 10.0.14393.9512 or later, Windows Server 2012 R2 to 6.3.9600.23397 or later, and Windows Server 2012 to 6.2.9200.26349 or later. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify all Windows DHCP servers in your environment and determine their current build versions against Microsoft's CVE-2026-69547 advisory to establish exposure scope. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today