CVE-2026-62745: Windows DHCP Server Information Disclosure Vulnerability
Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
Other sources
Windows DHCP Server Information Disclosure Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9418Patch KB5120418 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.26279Patch KB5120385 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.23337Patch KB5120386 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33296Fixed in 10.0.26100.33222Patch KB5120228 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5499Fixed in 10.0.20348.5440Patch KB5120229 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9115Patch KB5120238
Event History
Frequently Asked Questions
What is the severity of CVE-2026-62745?
CVE-2026-62745 has a medium severity rating of 6.5.
How does CVE-2026-62745 affect affected systems?
CVE-2026-62745 allows an unauthorized attacker to disclose information over an adjacent network.
Which versions of Windows are impacted by CVE-2026-62745?
CVE-2026-62745 affects Microsoft Windows 10 and multiple versions of Windows Server, including 2012, 2016, 2019, 2022, and 2025.
What is the nature of the vulnerability in CVE-2026-62745?
CVE-2026-62745 is caused by an integer underflow in the Windows DHCP Server.
How can I protect my systems from CVE-2026-62745?
To protect against CVE-2026-62745, ensure that your Windows systems are updated with the latest security patches from Microsoft.