CVE-2026-72979 – Windows DHCP Server Remote Code Execution Vulnerability
CVSS 9.8
CRITICAL
Critical - Same Day Deployment
“A single malicious network packet could turn a DHCP Server flaw into remote code execution, without authentication or user interaction.”
CVE-2026-72979 is a critical use-after-free vulnerability in Windows DHCP Server. An unauthenticated attacker can send a specially crafted packet to an affected service over the network and potentially execute code on the target system. Exploitation requires low attack complexity, no privileges, and no user interaction, with potential high impact to confidentiality, integrity, and availability.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-416
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.