CVE-2026-69679Important

Windows DHCP Server Denial of Service Vulnerability

Assessment

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

Severity: Important
CVSS base score: 5.7CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C
Impact: Denial of Service
EPSS, next 30 days: 0.6%Higher than 48.9% of scored CVEs · FIRST model run 26 Sep 2026 · about EPSS
Exploitability: Exploitation Less Likely
Publicly disclosed: No
Customer action: Required: apply the update
Component: Windows DHCP Server
Weakness: CWE-125: Out-of-bounds Read
Issued by: Microsoft
Published: 8 Sep 2026 · September 2026
Last revised: 8 Sep 2026

6 KBs

KB	Type	Restart	Applies to	Other CVEs
KB5122871	Security Update	Required	Windows Server 2025, Windows Server 2025 (Server Core installation)	All CVEs in KB5122871
KB5122876	Security Update	Required	Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for x64-based Systems, Windows Server 2019 and 1 more	All CVEs in KB5122876
KB5122882	Security Update	Required	Windows Server 2022, Windows Server 2022 (Server Core installation)	All CVEs in KB5122882
KB5123065	Monthly Rollup	Required	Windows Server 2012, Windows Server 2012 (Server Core installation)	All CVEs in KB5123065
KB5123066	Monthly Rollup	Required	Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)	All CVEs in KB5123066
KB5123099	Security Update	Required	Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more	All CVEs in KB5123099

ESU, Windows

16 affected products