Executive brief
Windows DHCP Server is a critical network service that assigns IP addresses to devices on corporate networks. A use-after-free vulnerability allows an attacker on the network to execute arbitrary code on the server without authentication, potentially giving them complete control over the network infrastructure and access to sensitive business systems.
Technical details
A use-after-free vulnerability exists in Windows DHCP Server, where freed memory is dereferenced during network packet processing. The vulnerability is remotely exploitable without authentication, as an attacker can send specially crafted DHCP packets to trigger the memory safety defect. No user interaction is required. Successful exploitation results in arbitrary code execution in the context of the DHCP Server process, allowing an attacker to compromise the server. The CVSS score of 9.8 reflects the high severity due to network accessibility and lack of authentication requirements.
Affected products
- Microsoft Windows DHCP Server
Timeline
- 2026-09-08: disclosed