Windows 10 1607 DHCP Server Hit by CVSS 8.0 Vulnerability

Microsoft disclosed CVE-2026-69412, an 8.0-rated stack-based buffer overflow in Windows DHCP Server that lets an authenticated attacker execute code over an adjacent network, affecting Windows 10 1607. Patches are available while exploitation remains unlikely with no known attacks reported.

Source:NVD

Post

Windows 10 1607 DHCP Server Hit by CVSS 8.0 Vulnerability

TL;DRAI · 60 sec read

Microsoft has disclosed a high-severity remote code execution vulnerability in its Windows DHCP Server, including Windows 10 Version 1607.

A stack-based buffer overflow enables code execution over an adjacent network. The flaw, tracked as CVE-2026-69412, is a stack-based buffer overflow classified under CWE-121. An authenticated attacker with low-level access to an affected server could send a specially crafted request to execute code on the server.

A stack-based buffer overflow enables code execution over an adjacent network.

The vulnerability carries a CVSS 3.1 base score of 8.0 with the vector AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. It is rated Important severity.

From The CircuitryThe Feed — live briefs across tech, all day.See what’s happening →

Exploitation is considered unlikely with no known attacks in the wild. No public disclosure or known exploitation existed at the time of publication on September 8, 2026. The issue was released on that date according to the Microsoft Security Response Center.

Exploitation is considered unlikely with no known attacks in the wild.

Patches are available but no workarounds are listed. The vulnerability affects Windows 10 Version 1607 among other products. Security updates provide the fix, with no mitigations or workarounds detailed in the advisory.

The disclosure comes directly from the Microsoft Security Response Center update guide for this CVE. Administrators of affected systems are advised to apply the available security updates promptly.

EXPERT TAKE

Enterprise environments still running Windows 10 1607 should prioritize this patch given the high confidentiality, integrity, and availability impact scores.

Why this mattersAI · ~100 words

Tap a lens to see what this story means for you.

Reader-supported

DonateBuy me a coffee →Follow@thecircuitry_ →Follow@thecircuitry.to →

Reader-supported · The Brief

Liked this? The Brief brings you the whole day in tech, verified, every morning. Two minutes, free forever.

HELP US IMPROVE

Reader-supported

The Circuitry is a passion project I've always wanted to build, and I love the work behind it.

Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.

Any contribution is appreciated. If not, no pressure. Thanks for reading.

Buy me a coffee

Windows Security Vulnerability

MORE IN TECH

Apple raises prices $100 across every remaining previous-generation iPhone

Apple has raised prices by $100 on the iPhone 16, full iPhone 17 lineup and iPhone Air immediately after unveiling the iPhone Duo and iPhone 18 Pro, according to tipster reports. The move means an affordable iPhone now costs more than it did yesterday.

Apple Launches Its C2 Cellular Modem Alongside iPhone Duo

Apple introduced the C2 modem with the iPhone Duo announcement, promising up to 50% faster uploads, 15% lower power consumption, and mmWave support in the US. Fully integrated with the A20 Pro and iOS 27, the platform uses AI algorithms to strengthen connection reliability in weak signal areas.

Apple overhauls iOS 27 controls and apps to fit the foldable iPhone Duo

Apple rebuilt portions of iOS 27 so the new iPhone Duo foldable can take full advantage of its dual screens, repositioning controls, adapting every app layout, and adding Apple Pencil support on both displays while borrowing multitasking concepts from iPadOS.