CVE-2026-72979

Windows DHCP Server is the service that hands out network settings (like IP addresses) to devices on your network. This bug is like a mistake in how the server manages memory while processing DHCP traffic, which can let an attacker run code on the server from the network. In practical terms, if a malicious sender can reach your DHCP server, they may be able to take control or disrupt it.

This matters if you use the Windows DHCP Server role on Windows 10 or any of the listed Windows Server versions. It’s specifically a risk when the DHCP service can be reached from a network connection (for example, from client networks or other reachable segments). Only consider exposure if the vulnerable service is present and reachable; otherwise it won’t apply.

This is a RED issue because it’s a remote code execution vulnerability in a network-facing service, which can allow attackers to compromise servers without needing a user to click anything. Even though it’s not in CISA KEV and there’s no public exploit code on record, the traffic-light verdict is still RED due to the severity and network reachability of DHCP.