CVE-2026-62761: Windows DHCP Server Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
Other sources
Windows DHCP Server Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9418Patch KB5120418 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33296Fixed in 10.0.26100.33222Patch KB5120228 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5499Fixed in 10.0.20348.5440Patch KB5120229 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9115Patch KB5120238 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.26280Patch KB5120386 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.23338Patch KB5120385
Event History
Frequently Asked Questions
What is the severity of CVE-2026-62761?
The severity of CVE-2026-62761 is high, with a CVSS score of 7.8.
What type of vulnerability is CVE-2026-62761?
CVE-2026-62761 is an elevation of privilege vulnerability in the Windows DHCP Server.
How can I mitigate the risks associated with CVE-2026-62761?
To mitigate CVE-2026-62761, ensure that you apply the latest security updates provided by Microsoft for affected software.
Which versions of Windows are affected by CVE-2026-62761?
CVE-2026-62761 affects multiple versions including Windows 10 and various editions of Windows Server from 2012 to 2025.
Can an authorized user exploit CVE-2026-62761?
Yes, an authorized attacker can exploit CVE-2026-62761 to elevate their privileges locally on the affected systems.