{"id":"CVE-2026-70250","published":"2026-10-13T19:19:42.457","lastModified":"2026-10-13T21:18:12.450","description":"Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-362","CWE-416"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70250","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Windows DHCP Client allows remote attackers on the same network segment to execute arbitrary code with system-level privileges. This flaw occurs when the DHCP client processes malformed DHCP responses, leading to memory corruption that can be exploited to gain full control over the affected system.","exploitability":"Exploitation requires an attacker to be on the adjacent network segment and send specially crafted DHCP responses to trigger the use-after-free condition, making it moderately difficult but achievable with network access.","blast_radius":"If exploited, this vulnerability could allow attackers to compromise any Windows system running the DHCP client service, potentially leading to full network infiltration and lateral movement across the affected network segment.","remediation":"Deploy the Microsoft security update KB5043298 immediately to address this vulnerability in Windows systems.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","dhcp","windows"],"model":"garnet-coder","analyzedAt":"2026-10-18T09:56:03.362Z"}}