Recorded 15 Oct 2026 at 01:07 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record.
The historical field “Public exploit code” recorded Nuclei detection-template membership. It did not establish exploit availability. The original recorded fields remain below.
The historical “Publicly disclosed: No” field could represent a missing MSRC assessment. It does not establish that the vulnerability was undisclosed. The original recorded fields remain below.
CVEMicrosoft Security Response Center
Windows DHCP Client Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
CWE-401: Missing Release of Memory after Effective Lifetime
Issued by
Microsoft
Customer action
Required: apply the update
Affected products
Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems, Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems, Windows Server 2025, Windows Server 2025 (Server Core installation)
Updates that fix it
KB5122871: Windows Server 2025, Windows Server 2025 (Server Core installation) (restart required); KB5124008: Windows 11 Version 24H2 for ARM64-based Systems, Windows 11 Version 24H2 for x64-based Systems, Windows 11 Version 25H2 for ARM64-based Systems, Windows 11 Version 25H2 for x64-based Systems (restart required); KB5124012: Windows 11 Version 26H1 for ARM64-based Systems, Windows 11 version 26H1 for x64-based Systems (restart required)