Executive brief
The Windows DHCP Client, a core networking component that automatically configures IP addresses on Windows machines, contains a heap-based buffer overflow vulnerability. An authorized attacker on an adjacent network can exploit this flaw to execute arbitrary code and gain elevated privileges on the affected system, potentially compromising data or enabling further attacks.
Technical details
A heap-based buffer overflow exists in the Windows DHCP Client component, allowing memory corruption when processing specially crafted DHCP responses. The vulnerability requires the attacker to be positioned on an adjacent network and possess some level of authorization. By sending a malicious DHCP packet, an attacker can overflow a heap buffer and achieve arbitrary code execution, leading to privilege escalation on the target system. A fix from Microsoft is available through security updates.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed