CVE-2026-70250

Summary

A use-after-free vulnerability in Windows DHCP Client allows remote attackers on the same network segment to execute arbitrary code with system-level privileges. This flaw occurs when the DHCP client processes malformed DHCP responses, leading to memory corruption that can be exploited to gain full control over the affected system.

Exploitability

Exploitation requires an attacker to be on the adjacent network segment and send specially crafted DHCP responses to trigger the use-after-free condition, making it moderately difficult but achievable with network access.

Blast radius

If exploited, this vulnerability could allow attackers to compromise any Windows system running the DHCP client service, potentially leading to full network infiltration and lateral movement across the affected network segment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Microsoft security update KB5043298 immediately to address this vulnerability in Windows systems.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.