Windows DHCP Server Information Disclosure Vulnerability
MonitorCVSS 5.9CVE-2026-70124Sep 8, 2026
Microsoft
IT in OT - Windows Server and Active Directory are widely deployed in OT environments
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityHigh
User InteractionNone needed
Summary
Out-of-bounds read vulnerability in Windows DHCP Server allows an unauthenticated attacker over the network to disclose information from server memory. The vulnerability affects Windows 10 (versions 1607 and 1809) and Windows Server 2016, 2019, 2022, and 2025. All affected products have vendor fixes available.
What this means
What could happen
An attacker on the network could read sensitive information from the Windows DHCP Server memory without authentication, potentially exposing configuration data or other system details. This is a passive information disclosure with no impact on process operations or availability.
Who's at risk
Organizations running Windows DHCP Servers should care about this. Specifically, network infrastructure teams managing Windows Server 2016, 2019, 2022, or 2025 systems with the DHCP Server role enabled, or Windows 10 systems acting as DHCP servers in small networks. This affects the server's ability to manage IP address allocation securely.
How it could be exploited
An attacker with network access to the DHCP server (typically port 67/UDP) could send a specially crafted DHCP request that triggers an out-of-bounds memory read, allowing the attacker to extract information from the server's memory.
Prerequisites
- Network access to DHCP server (port 67/UDP)
- No authentication or credentials required
remotely exploitableno authentication requiredinformation disclosure only
Exploitability
Unlikely to be exploited — EPSS score 0.8%
Affected products (12)
12 with fix
ProductAffected VersionsFix Status
Remediation & Mitigation
0/1
Schedule — requires maintenance window
0/1Patching may require device reboot — plan for process interruption
HOTFIXApply the 2026-Sep security update to affected Windows Server and Windows 10 systems running the DHCP Server role
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/00b9a569-2cb1-4430-9435-afd07e80d399Get OT security insights every Tuesday
Advisory breakdowns, a weekly summary, and incident analyses for the people actually defending OT environments. Free, no account required.