CVE-2026-96134: Windows DHCP Server Denial of Service Vulnerability
Published Nov 10, 2026
·Updated
Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Other sources
Windows DHCP Server Denial of Service Vulnerability
— Microsoft
Affected Software
8 affected componentsFixes available
Microsoft Windows Server 2022<10.0.20348.5870
10.0.20348.5870
Microsoft Windows Server 2019<10.0.17763.9487
10.0.17763.9487
Microsoft Windows Server 2016<10.0.14393.9688
10.0.14393.9688
Microsoft Windows Server 2019<10.0.17763.9487
10.0.17763.9487
Microsoft Windows Server 2016<10.0.14393.9688
10.0.14393.9688
Microsoft Windows Server 2025<10.0.26100.33822, <10.0.26100.33730
10.0.26100.3382210.0.26100.33730
Microsoft Windows Server 2022<10.0.20348.5870
10.0.20348.5870
Microsoft Windows Server 2025<10.0.26100.33822, <10.0.26100.33730
10.0.26100.3382210.0.26100.33730
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5870Patch KB5131090 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9487Patch KB5131085 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9688Patch KB5131291 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33822Fixed in 10.0.26100.33730Patch KB5131077
Event History
Nov 10, 2026
CVE Published
via Microsoft·04:00 PM
Data Sourced
via Microsoft·04:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·04:00 PM
Affected Software
CVE Published
via MITRE·06:16 PM
Data Sourced
via MITRE·06:16 PM
DescriptionSeverity
Data Sourced
via NVD·07:22 PM
DescriptionSeverityWeakness