Medium
6.5
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized...
CVE-2026-118739
First seen on SecPulse
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| MicrosoftWindows 11 Version 24H2 |
≥ 10.0.26100.0, < 10.0.26100.9168→ 10.0.26100.9168 |
10.0.26100.9168 |
| MicrosoftWindows 11 Version 25H2 |
≥ 10.0.26200.0, < 10.0.26200.9168→ 10.0.26200.9168 |
10.0.26200.9168 |
| MicrosoftWindows 11 version 26H1 |
≥ 10.0.28000.0, < 10.0.28000.2704→ 10.0.28000.2704 |
10.0.28000.2704 |
| MicrosoftWindows Server 2025 |
≥ 10.0.26100.0, < 10.0.26100.33296→ 10.0.26100.33296 |
10.0.26100.33296 |
| MicrosoftWindows Server 2025 (Server Core installation) |
≥ 10.0.26100.0, < 10.0.26100.33296→ 10.0.26100.33296 |
10.0.26100.33296 |
Original description The description as published by the source.
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
Source: Microsoft Security Response Center Blog NVD GitHub Advisory
References
- web msrc.microsoft.com
- web nvd.nist.gov
- web github.com