CVE-2026-62755

Windows’ DHCP client is the part of Windows that helps get network settings automatically. This bug lets someone with basic local access send in bad (overly long) data so the component misbehaves in a way that can hand them full administrator power over the machine, meaning they could read files, change settings, and install software.

This matters to you if you run or manage any of these Windows versions on computers or servers: Windows 10, Windows 11, and the listed Windows Server releases. It’s a local privilege escalation issue, meaning it requires an attacker to already have low-level local access on the machine (and no user interaction is needed once they’re there). Only consider it a risk if a bad actor can get local foothold (for example, through a compromised account, insider access, or another local compromise).

Verdict is RED because the flaw can turn basic local access into complete administrator control, which can lead to full compromise of your systems. There’s no public evidence in the findings that it’s being exploited in the wild for this specific CVE, but patching is still urgent due to the impact and the attacker technique pattern noted in reporting.