CVE-2026-62812

Windows DHCP Server is the service that hands out IP settings to computers on your network. This vulnerability is like a door that can be tricked into opening the wrong way when the attacker is already allowed onto the machine with low permissions, letting them push their privileges much higher.

This matters if you run the Windows DHCP Server role on any of the affected systems: Windows 10 or Windows Server (2012, 2012 R2, 2016, 2019, 2022, 2025). The key risk is that an authorized attacker with low-level access can try this locally, without needing any special user actions. Reachability is effectively gated by local access: it’s only a risk if someone already has low privileges on the device running DHCP Server.

This is RED because it enables local privilege escalation on DHCP servers, and patching is the direct mitigation. Even though no incidents are specifically linked to this CVE in the provided reporting and no public exploit code is recorded, we still treat it as urgent for DHCP servers because once an attacker has low access on a machine, they can try to escalate. Prioritize patching on systems that actually run DHCP Server.