NetSight
IP …
high8.1

CVE-2026-88120

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Impact

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Affected products

VendorProductAffected versions
MicrosoftWindows Server 2019
from 10.0.17763.0 before 10.0.17763.9376
MicrosoftWindows Server 2016 (Server Core Installation)
from 10.0.14393.0 before 10.0.14393.9612
MicrosoftWindows Server 2019 (Server Core Installation)
from 10.0.17763.0 before 10.0.17763.9376
MicrosoftWindows Server 2012 R2
from 6.3.9600.0 before 6.3.9600.23470
MicrosoftWindows Server 2025 (Server Core Installation)
from 10.0.26100.0 before 10.0.26100.33650
MicrosoftWindows Server 2012 R2 (Server Core Installation)
from 6.3.9600.0 before 6.3.9600.23470
MicrosoftWindows Server 2012 (Server Core Installation)
from 6.2.9200.0 before 6.2.9200.26434
MicrosoftWindows Server 2025
from 10.0.26100.0 before 10.0.26100.33650
MicrosoftWindows Server 2012
from 6.2.9200.0 before 6.2.9200.26434
MicrosoftWindows Server 2022
from 10.0.20348.0 before 10.0.20348.5761
MicrosoftWindows Server 2016
from 10.0.14393.0 before 10.0.14393.9612
MicrosoftWindows Server 2012
All versions
Version r2
MicrosoftWindows Server 2016
before 10.0.14393.9612
MicrosoftWindows Server 2019
before 10.0.17763.9376
MicrosoftWindows Server 2022
before 10.0.20348.5761
MicrosoftWindows Server 2025
before 10.0.26100.33650

Weakness classification

CWE-416

References