Stack-based Buffer Overflow in Windows DHCP Client by Microsoft
CVE-2026-44815

9.8CRITICAL

Key Information:

Vendor

Microsoft
Status
Windows 10 Version 1607
Windows 10 Version 1809
Windows 10 Version 21h2
Windows 10 Version 22h2
Vendor
CVE Published:
9 June 2026

What is CVE-2026-44815?

A stack-based buffer overflow vulnerability exists in the Windows DHCP Client that could allow an unauthorized attacker to execute arbitrary code on a target system remotely. By exploiting this flaw, attackers can potentially take control of affected systems over the network, posing a significant risk to network security. Users are advised to apply available updates to protect their systems from unauthorized access and to ensure network safety.

Affected Version(s)

Windows 10 Version 1607 32-bit Systems 10.0.14393.0 < 10.0.14393.9234

Windows 10 Version 1809 32-bit Systems 10.0.17763.0 < 10.0.17763.8880

Windows 10 Version 21H2 32-bit Systems 10.0.19044.0 < 10.0.19044.7417

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.