MicrosoftCVE-2026-62745

Microsoft Windows DHCP Server: integer overflow

CVE-2026-62745 · Published Aug 11, 2026 · updated Sep 2, 2026

Medium6.5

Fix: upgrade to 6.2.9200.26280 or later (6 fixed versions below)

Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.

Affected versions

Package	Affected	Fixed in
Windows Server 2012 Product	>= 6.2.9200.0, < 6.2.9200.26280	6.2.9200.26280
Windows Server 2012 (Server Core installation) Product	>= 6.2.9200.0, < 6.2.9200.26280	6.2.9200.26280
Windows Server 2012 R2 Product	>= 6.3.9600.0, < 6.3.9600.23338	6.3.9600.23338
Windows Server 2012 R2 (Server Core installation) Product	>= 6.3.9600.0, < 6.3.9600.23338	6.3.9600.23338
Windows Server 2016 Product	>= 10.0.14393.0, < 10.0.14393.9418	10.0.14393.9418
Windows Server 2016 (Server Core installation) Product	>= 10.0.14393.0, < 10.0.14393.9418	10.0.14393.9418
Windows Server 2019 Product	>= 10.0.17763.0, < 10.0.17763.9121	10.0.17763.9121
Windows Server 2019 (Server Core installation) Product	>= 10.0.17763.0, < 10.0.17763.9121	10.0.17763.9121
Windows Server 2022 Product	>= 10.0.20348.0, < 10.0.20348.5499	10.0.20348.5499
Windows Server 2025 Product	>= 10.0.26100.0, < 10.0.26100.33296	10.0.26100.33296
Windows Server 2025 (Server Core installation) Product	>= 10.0.26100.0, < 10.0.26100.33296	10.0.26100.33296

Details and references