Vulnerabilities
CVE-2026-69803: Windows DHCP Server Information Disclosure
Microsoft has acknowledged CVE-2026-69803, an information disclosure flaw in the Windows DHCP Server that could allow attackers to read sensitive data. The vulnerability is currently unpatched; defenders should monitor for updates and limit DHCP exposure.
What happened
Microsoft has officially acknowledged CVE-2026-69803, a flaw in the Windows DHCP Server that can lead to the disclosure of sensitive configuration and lease information. The issue is an information‑disclosure vulnerability that does not require authentication but can be triggered by crafted DHCP packets.
Impact
Attackers who can reach the DHCP server may obtain details such as lease times, client MAC addresses, and network configuration data. While the flaw does not provide code execution, the exposed data could assist in reconnaissance or facilitate further attacks against the network.
What to do
- Verify whether your environment runs a Windows Server version that hosts the DHCP service (e.g., 2016, 2019, 2022).
- Apply the official patch as soon as Microsoft releases it; until then, treat the vulnerability as a high‑risk exposure.
- Restrict DHCP traffic to trusted subnets using firewall rules or VLAN segmentation.
- Disable the DHCP service on servers that do not require it, or move the service to a dedicated, hardened host.
- Monitor DHCP logs for anomalous requests or repeated attempts to query lease information.
Related vulnerabilities
Windows DHCP Server Security Feature Bypass Vulnerability (CVE-2026-83787)
A local authorized attacker can bypass a built‑in security feature in Windows DHCP Server due to insufficient data authenticity verification. The flaw is present in all Windows Server DHCP services and can be mitigated by applying the latest Microsoft patch and tightening local admin controls.
Read briefing
CVE-2026-108462: Windows Kernel Information Disclosure Vulnerability
Microsoft has identified a Windows kernel information disclosure flaw (CVE‑2026‑108462) that permits local attackers with elevated privileges to read sensitive system data. The issue is fixed in the latest security update; administrators should apply the patch immediately and verify that kernel memory is protected.
Read briefing
CVE-2026-70063: Local Windows Kernel Information Disclosure Vulnerability
Microsoft has identified CVE-2026-70063, an out‑of‑bounds read in the Windows kernel that permits a local, authorized attacker to read sensitive memory. The flaw is fixed in the latest cumulative update for Windows 10, Windows 11, and Windows Server 2022. Defenders should verify that the update is installed and monitor for any anomalous local privilege activity.
Read briefing
CVE-2026-69572: Windows SMB Client Information Disclosure Vulnerability
A flaw in the Windows SMB client can leak sensitive data to local users. The issue is triggered by malformed SMB packets and affects Windows 10/11 and Server 2019/2022. Apply the latest MSRC update or patch to mitigate the risk.
Read briefing