CVE-2026-65785

Analyzed Analyzed - Analysis Complete

Uncontrolled Resource Consumption in Windows DHCP Client

Publication date: 2026-08-11

Last updated on: 2026-08-13

Assigner: Microsoft Corporation

Description

Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-13

Generated

2026-09-01

AI Q&A

2026-08-11

EPSS Evaluated

2026-08-30

NVD

CVE-2026-65785

EUVD

EUVD-2026-56439

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	windows_11_24h2	to 10.0.26100.9106 (exc)
microsoft	windows_11_24h2	to 10.0.26100.9106 (exc)
microsoft	windows_11_26h1	to 10.0.28000.2704 (exc)
microsoft	windows_11_26h1	to 10.0.28000.2704 (exc)
microsoft	windows_11_25h2	to 10.0.26200.9106 (exc)
microsoft	windows_11_25h2	to 10.0.26200.9106 (exc)
microsoft	windows_server_2025	to 10.0.26100.33222 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability involves uncontrolled resource consumption in the Windows DHCP Client. An unauthorized attacker can exploit it to cause a denial of service over an adjacent network by consuming excessive system resources.

Detection Guidance

Detection requires monitoring for unusual DHCP client behavior such as excessive resource usage or network flooding. Check Windows Event Viewer for DHCP-related errors or warnings. Use network monitoring tools like Wireshark to inspect DHCP traffic for anomalies.

Impact Analysis

This vulnerability can lead to a denial of service, disrupting network services for users relying on the affected Windows DHCP Client. It may cause connectivity issues or service outages in the local network environment.

Compliance Impact

This vulnerability enables denial of service attacks over adjacent networks, which could disrupt critical services. While not directly violating GDPR or HIPAA, such disruptions may impact availability requirements under these regulations, potentially leading to compliance issues if systems fail to maintain expected uptime or data access.

Mitigation Strategies

Apply the latest security updates from Microsoft to patch the Windows DHCP Client vulnerability. Monitor network traffic for unusual DHCP requests that may indicate exploitation attempts.

Hi! I’m here to help you understand CVE-2026-65785. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70