CVE-2026-96320

Summary

A heap-based buffer overflow in Windows DHCP Server allows remote attackers to execute arbitrary code with high privileges. This vulnerability could enable attackers to take full control of affected systems without needing authentication.

Exploitability

Exploitation is relatively straightforward requiring only network access to the DHCP server, with no authentication needed and minimal preconditions for successful code execution.

Blast radius

The impact could be severe across enterprise networks as DHCP servers are typically critical infrastructure components that handle network configuration for multiple devices, potentially allowing attackers to compromise entire network segments.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the Windows Server 2019 cumulative update KB5057384 or Windows Server 2022 cumulative update KB5057385 immediately as these contain the specific fix for CVE-2026-96320.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.