CVE-2026-96934

Summary

A use-after-free vulnerability in Windows DHCP Server allows remote attackers to execute arbitrary code with high privileges. This critical flaw occurs when the server processes certain network requests, potentially enabling attackers to gain full control over the affected system.

Exploitability

Exploitation is relatively straightforward for an unauthenticated attacker who can send crafted packets to the DHCP server, requiring no special privileges or user interaction.

Blast radius

If exploited, this vulnerability could allow attackers to compromise entire networks by taking control of DHCP servers, potentially affecting thousands of devices that rely on proper DHCP services for network connectivity and configuration.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the Windows Server 2019 cumulative update KB5047368 or later, or Windows Server 2022 cumulative update KB5047369 or later, as these contain the specific patch for CVE-2026-96934.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.