CVE-2026-49181
Microsoft · Published July 14, 2026
9.8
CVSS v3.1
CRITICALPatch availableGet patch
Description
Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.
Affected Products
- Windows 10 1607 < 10.0.14393.9339
- Windows 10 1809 < 10.0.17763.9020
- Windows Server 2012
- Windows Server 2016 < 10.0.14393.9339
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H