CVE-2026-48564

Windows DHCP Server hands out network settings (like IP addresses) to devices. This bug can let a hostile party trigger a memory-handling flaw through network traffic and cause the server to run malicious code. If it succeeds, the attacker may take over the machine and disrupt the network that your business relies on.

This matters if you use the Windows DHCP Server role on windows 10, windows server 2012, windows server 2016, windows server 2019, windows server 2022, windows server 2025, or windows server 2012 r2. A remote attacker only needs network access to target the DHCP Server service, so any reachable DHCP Server in your environment is in scope once it’s exposed. Only proceed if the DHCP Server role is actually in use on those systems (it’s not a general “every Windows device” issue).

This is urgent (RED) because it’s a remote code execution issue in a network-facing service, meaning an attacker can potentially gain control of the server from the network. Even though KEV is not listed and no public exploit code is on record, Microsoft has already released fixes for multiple affected Windows versions, and press attention is focused on patching. Prioritize installing the vendor updates immediately on any server running DHCP Server.