Windows DHCP Server Information Disclosure Vulnerability
MonitorCVSS 5.9CVE-2026-69930Sep 8, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityHigh
User InteractionNone needed
Summary
An out-of-bounds read vulnerability in Windows DHCP Server allows a remote attacker to disclose sensitive information from server memory without authentication. The attacker sends a specially crafted network request to the DHCP Server, which processes it incorrectly and returns sensitive data such as IP configuration details or network topology information. This affects Windows 10 versions 1607 and 1809, and Windows Server 2016, 2019, 2022, and 2025.
What this means
What could happen
An attacker on the network can read sensitive information from the Windows DHCP Server's memory, such as IP configuration details or network topology data, without needing credentials. This does not allow direct control of network operations but could inform a follow-up attack.
Who's at risk
Windows Server administrators running DHCP services on Windows Server 2016, 2019, 2022, or 2025, and Windows 10 users on versions 1607 and 1809. This affects any facility using Windows-based DHCP infrastructure for network IP address management, including utilities with IT networks managing both corporate and OT devices.
How it could be exploited
An attacker sends a specially crafted network request to the DHCP Server on port 67/68 (UDP). The DHCP Server processes the request incorrectly, causing it to read beyond allocated memory boundaries and return sensitive data to the attacker. No valid DHCP credentials or authentication are required.
Prerequisites
- Network access to DHCP Server ports (UDP 67/68)
- DHCP Server service running and accessible from attacker's network segment
- No authentication required
remotely exploitableno authentication requiredlow complexityaffects network infrastructure supporting OT systems
Exploitability
Unlikely to be exploited — EPSS score 0.8%
Affected products (12)
12 with fix
ProductAffected VersionsFix Status
Remediation & Mitigation
0/7
Do now
0/1WORKAROUNDRestrict network access to DHCP Server ports (UDP 67/68) to only authorized DHCP client subnets using firewall rules or network segmentation
Schedule — requires maintenance window
0/6Patching may require device reboot — plan for process interruption
Windows Server 2019
HOTFIXUpdate Windows Server 2019 and Server Core to Build 10.0.17763.9245 or later
Windows Server 2022
HOTFIXUpdate Windows Server 2022 and Server Core to Build 10.0.20348.5622 or later
Windows Server 2025
HOTFIXUpdate Windows Server 2025 and Server Core to Build 10.0.26100.33438 or later
Windows Server 2016
HOTFIXUpdate Windows Server 2016 and Server Core to Build 10.0.14393.9512 or later
All products
HOTFIXUpdate Windows 10 Version 1809 (32-bit and 64-bit) to Build 10.0.17763.9245 or later
HOTFIXUpdate Windows 10 Version 1607 (32-bit and 64-bit) to Build 10.0.14393.9512 or later
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/3d8c58f4-ebc8-4522-8ae4-f92b3f4d9d30Get OT security insights every Tuesday
Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.