Denial of Service Vulnerability in Windows DHCP Server by Microsoft
CVE-2025-33050

7.5HIGH

Key Information:

Vendor

Microsoft
Status
Windows Server 2019
Windows Server 2019 (server Core Installation)
Windows Server 2022
Windows Server 2025 (server Core Installation)
Vendor
CVE Published:
10 June 2025

What is CVE-2025-33050?

An identification failure in the Windows DHCP Server exposes networks to denial of service threats, enabling unauthorized attackers to disrupt network services. This vulnerability allows malicious actors to exploit the DHCP protocol, leading to potential service outages affecting legitimate users. It is crucial for organizations using affected versions of Windows Server to implement recommended mitigations to safeguard their networks.

Affected Version(s)

Windows Server 2016 (Server Core installation) x64-based Systems 10.0.14393.0 < 10.0.14393.8148

Windows Server 2016 x64-based Systems 10.0.14393.0 < 10.0.14393.8148

Windows Server 2019 (Server Core installation) x64-based Systems 10.0.17763.0 < 10.0.17763.7434

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-33050 : Denial of Service Vulnerability in Windows DHCP Server by Microsoft