CVE-2026-62803: Windows DHCP Server Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
Other sources
Windows DHCP Server Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.26279Patch KB5120385 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9418Patch KB5120418 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.23337Patch KB5120386 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5499Fixed in 10.0.20348.5440Patch KB5120229 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9115Patch KB5120238 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33296Fixed in 10.0.26100.33222Patch KB5120228
Event History
Frequently Asked Questions
What is the severity of CVE-2026-62803?
CVE-2026-62803 has a severity rating of high with a score of 7.8.
How does CVE-2026-62803 affect Microsoft Windows products?
CVE-2026-62803 allows an authorized attacker to elevate privileges locally on affected Microsoft Windows products.
What versions of Windows are impacted by CVE-2026-62803?
CVE-2026-62803 impacts Microsoft Windows 10, Windows Server 2012, 2016, 2012 R2, 2022, 2019, and 2025.
How do I fix CVE-2026-62803?
To fix CVE-2026-62803, ensure that your affected Windows systems are updated with the latest security patches provided by Microsoft.
What type of vulnerability is CVE-2026-62803?
CVE-2026-62803 is classified as an elevation of privilege vulnerability in the Windows DHCP Server.