Windows DHCP Client Elevation of Privilege Vulnerability
Plan PatchCVSS 8CVE-2026-50683Jul 14, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorAdjacent
Auth RequiredLow
ComplexityLow
User InteractionNone needed
Summary
Heap-based buffer overflow in Windows DHCP Server that allows an authenticated attacker on an adjacent network to elevate privileges. Exploitation is assessed as unlikely. Vendor has released patches for all affected versions.
What this means
What could happen
An attacker on an adjacent network with legitimate user credentials could exploit a DHCP buffer overflow to escalate privileges and gain elevated control of the Windows system.
Who's at risk
Windows Server administrators running DHCP services, and any organization with Windows 10 or Windows Server 2016/2019/2022/2025 systems on shared networks where adjacent (same-segment) network access exists. This particularly affects utilities with Windows-based DHCP servers supporting industrial network segments.
How it could be exploited
The attacker must be on the same network segment (adjacent network) and possess valid user credentials. They send a specially crafted DHCP request to the DHCP service, which triggers a heap buffer overflow and allows privilege escalation on the affected system.
Prerequisites
- Network access to the DHCP service on the same network segment (adjacent network)
- Valid user account credentials
- DHCP server or DHCP client with vulnerable Windows version running
Authentication required (user credentials)Requires adjacent network accessLow CVSS exploitability (8.0 with authenticated access)Low EPSS score (0.5%)Vendor patches available
Exploitability
Unlikely to be exploited — EPSS score 0.6%
Affected products (11)
11 with fix
ProductAffected VersionsFix Status
Remediation & Mitigation
0/3
Do now
0/1WORKAROUNDRestrict network access to DHCP services (port 67/68) to authorized network segments only
Schedule — requires maintenance window
0/1Patching may require device reboot — plan for process interruption
HOTFIXApply the 2026-July Windows security update to all affected Windows 10 and Windows Server systems
Long-term hardening
0/1HARDENINGSegment DHCP infrastructure onto isolated network VLANs to limit adjacent network access
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/9abbb7da-6959-4e6a-9422-9624b3b8ed79Get OT security insights every Tuesday
Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.