{"id":"CVE-2026-70069","published":"2026-10-13T19:19:18.323","lastModified":"2026-10-13T22:18:02.337","description":"Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70069","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute arbitrary code remotely. This vulnerability is particularly dangerous because it can be exploited over the network by authenticated users, potentially leading to full system compromise.","exploitability":"Exploitation requires an authenticated user with access to the DHCP server, which is moderately difficult but achievable in environments where users have legitimate administrative access or through credential compromise.","blast_radius":"If exploited, this vulnerability could allow attackers to execute code on the DHCP server, potentially leading to network-wide disruption, lateral movement, and complete control over DHCP services that manage IP address assignments for network clients.","remediation":"Deploy the Windows DHCP Server update KB5043172 or later, which contains the patched version of the DHCP service.","detection":"Monitor for unusual DHCP server process behavior, particularly in the dhcpsrv.exe process, and look for signs of memory corruption or unexpected process restarts that may indicate exploitation attempts.","tags":["rce","dhcp","windows","network"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:55:07.406Z"}}