CVE-2026-45602
EUVD-2026-3556209.06.2026, 17:17
No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_10_1607 | 𝑥 < 10.0.14393.9234 |
| microsoft | windows_10_1607 | 𝑥 < 10.0.14393.9234 |
| microsoft | windows_10_1809 | 𝑥 < 10.0.17763.8880 |
| microsoft | windows_10_1809 | 𝑥 < 10.0.17763.8880 |
| microsoft | windows_10_21h2 | 𝑥 < 10.0.19044.7417 |
| microsoft | windows_10_21h2 | 𝑥 < 10.0.19044.7417 |
| microsoft | windows_10_21h2 | 𝑥 < 10.0.19044.7417 |
| microsoft | windows_10_22h2 | 𝑥 < 10.0.19045.7417 |
| microsoft | windows_10_22h2 | 𝑥 < 10.0.19045.7417 |
| microsoft | windows_10_22h2 | 𝑥 < 10.0.19045.7417 |
| microsoft | windows_11_23h2 | 𝑥 < 10.0.22631.7219 |
| microsoft | windows_11_24h2 | 𝑥 < 10.0.26100.8655 |
| microsoft | windows_11_25h2 | 𝑥 < 10.0.26200.8655 |
| microsoft | windows_11_26h1 | 𝑥 < 10.0.28000.2269 |
| microsoft | windows_server_2012 | - |
| microsoft | windows_server_2016 | 𝑥 < 10.0.14393.9234 |
| microsoft | windows_server_2019 | 𝑥 < 10.0.17763.8880 |
| microsoft | windows_server_2022 | 𝑥 < 10.0.20348.5256 |
| microsoft | windows_server_2025 | 𝑥 < 10.0.26100.32995 |
𝑥
= Vulnerable software versions
Windows Releases
Platform | Version | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Windows 10 |
| ||||||||
| Windows 11 |
| ||||||||
| Windows Server 2012 |
| ||||||||
| Windows Server 2012 R2 |
| ||||||||
| Windows Server 2016 |
| ||||||||
| Windows Server 2019 |
| ||||||||
| Windows Server 2022 |
| ||||||||
| Windows Server 2025 |
|
Common Weakness Enumeration
- CWE-349 - Acceptance of Extraneous Untrusted Data With Trusted DataThe software, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.
- CWE-229 - Improper Handling of ValuesThe software does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.