CVE-2026-69781CWE-401

CVE-2026-69781

Medium · published September 8, 2026

CVSS v3.1
6.5
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00581 · 47.1th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-09-08T22:19Z
Affected products (7)
ProductVersionsFixed in
microsoft/windows_11_24h2< 10.0.26100.944510.0.26100.9445
microsoft/windows_11_24h2< 10.0.26100.944510.0.26100.9445
microsoft/windows_11_25h2< 10.0.26200.944510.0.26200.9445
microsoft/windows_11_25h2< 10.0.26200.944510.0.26200.9445
microsoft/windows_11_26h1< 10.0.28000.295410.0.28000.2954
microsoft/windows_11_26h1< 10.0.28000.295410.0.28000.2954
microsoft/windows_server_2025< 10.0.26100.3343810.0.26100.33438
References (1)
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69781 · [email protected]
EPSS history
Timeline
  • 10 SEP 03:17Z
    EPSS moved — → 1%
    epss
  • 08 SEP 17:16Z
    Windows DHCP Client Denial of Service Vulnerability
    cvelistv5