CVE-2026-69876

Awaiting Analysis Awaiting Analysis - Queue

Use After Free in Windows DHCP Server Allows Code Execution

Publication date: 2026-09-08

Last updated on: 2026-09-08

Assigner: Microsoft Corporation

Description

Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-08

Last Modified

2026-09-08

Generated

2026-09-09

AI Q&A

2026-09-09

EPSS Evaluated

N/A

NVD

CVE-2026-69876

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	dhcp_server	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
CWE-415	The product calls free() twice on the same memory address.

Attack-Flow Graph

Executive Summary

This vulnerability is a use after free issue in the Windows DHCP Server. It allows an authorized attacker on the same network to execute arbitrary code by exploiting a memory corruption flaw.

Impact Analysis

An attacker on the same network could take control of the DHCP server, leading to potential data breaches, service disruption, or further network compromise.

Compliance Impact

This vulnerability could lead to unauthorized access or data exfiltration, violating confidentiality requirements in GDPR and HIPAA, potentially resulting in legal penalties and reputational damage.

Mitigation Strategies

Apply the latest security updates from Microsoft for the DHCP Server component. Isolate the DHCP server from untrusted networks if possible. Monitor network traffic for unusual activity related to DHCP operations.

Hi! I’m here to help you understand CVE-2026-69876. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70