MicrosoftCVE-2026-69876

Microsoft Windows DHCP Server: use after free

CVE-2026-69876 · Published Sep 8, 2026 · updated Sep 24, 2026

High8.0

Fix: upgrade to 10.0.14393.9512 or later (6 fixed versions below)

Use after free in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

Affected versions

Package	Affected	Fixed in
Windows 10 Version 1607 Product	>= 10.0.14393.0, < 10.0.14393.9512	10.0.14393.9512
Windows 10 Version 1809 Product	>= 10.0.17763.0, < 10.0.17763.9245	10.0.17763.9245
Windows Server 2012 Product	>= 6.2.9200.0, < 6.2.9200.26349	6.2.9200.26349
Windows Server 2012 (Server Core installation) Product	>= 6.2.9200.0, < 6.2.9200.26349	6.2.9200.26349
Windows Server 2012 R2 Product	>= 6.3.9600.0, < 6.3.9600.23398	6.3.9600.23398
Windows Server 2012 R2 (Server Core installation) Product	>= 6.3.9600.0, < 6.3.9600.23398	6.3.9600.23398
Windows Server 2016 Product	>= 10.0.14393.0, < 10.0.14393.9512	10.0.14393.9512
Windows Server 2016 (Server Core installation) Product	>= 10.0.14393.0, < 10.0.14393.9512	10.0.14393.9512
Windows Server 2019 Product	>= 10.0.17763.0, < 10.0.17763.9245	10.0.17763.9245
Windows Server 2019 (Server Core installation) Product	>= 10.0.17763.0, < 10.0.17763.9245	10.0.17763.9245
Windows Server 2022 Product	>= 10.0.20348.0, < 10.0.20348.5622	10.0.20348.5622
Windows Server 2025 Product	>= 10.0.26100.0, < 10.0.26100.33438	10.0.26100.33438

Details and references