{"id":"CVE-2026-96320","published":"2026-10-13T19:21:55.017","lastModified":"2026-10-16T15:41:08.857","description":"Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["microsoft"],"products":["windows 10 1607","windows 10 1809","windows server 2012","windows server 2016","windows server 2019","windows server 2022","windows server 2025"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96320","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows DHCP Server allows remote attackers to execute arbitrary code with high privileges. This vulnerability could enable attackers to take full control of affected systems without needing authentication.","exploitability":"Exploitation is relatively straightforward requiring only network access to the DHCP server, with no authentication needed and minimal preconditions for successful code execution.","blast_radius":"The impact could be severe across enterprise networks as DHCP servers are typically critical infrastructure components that handle network configuration for multiple devices, potentially allowing attackers to compromise entire network segments.","remediation":"Apply the Windows Server 2019 cumulative update KB5057384 or Windows Server 2022 cumulative update KB5057385 immediately as these contain the specific fix for CVE-2026-96320.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","dhcp","windows","network"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:51:27.542Z"}}