{"id":"CVE-2026-96934","published":"2026-10-13T19:22:05.590","lastModified":"2026-10-16T10:39:38.927","description":"Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":["microsoft"],"products":["windows 10 1607","windows 10 1809","windows server 2012","windows server 2016","windows server 2019","windows server 2022","windows server 2025"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96934","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Windows DHCP Server allows remote attackers to execute arbitrary code with high privileges. This critical flaw occurs when the server processes certain network requests, potentially enabling attackers to gain full control over the affected system.","exploitability":"Exploitation is relatively straightforward for an unauthenticated attacker who can send crafted packets to the DHCP server, requiring no special privileges or user interaction.","blast_radius":"If exploited, this vulnerability could allow attackers to compromise entire networks by taking control of DHCP servers, potentially affecting thousands of devices that rely on proper DHCP services for network connectivity and configuration.","remediation":"Apply the Windows Server 2019 cumulative update KB5047368 or later, or Windows Server 2022 cumulative update KB5047369 or later, as these contain the specific patch for CVE-2026-96934.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","dhcp","network","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:51:53.057Z"}}