CVE-2019-0725

—

CVSS 3.0

9.8 critical

EPSS

28%p98

Published

May 16, 2019 (May 16, 2019)

Modified

Jun 17, 2026

Description

A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets, aka 'Windows DHCP Server Remote Code Execution Vulnerability'.

Vendors: microsoft
Products: windows server 2008, windows server 2012, windows server 2016, windows server 2019
Weakness: CWE-787
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (28.2%)

In the news1 stories

Microsoft plugs wormable RDP flaw, new speculative execution side channel vulnerabilities

Help Net SecurityMay 17, 05:18 UTC · May 17, 2019Vulnerability in the wildCVE-2019-0708 CVE-2019-0863 CVE-2019-0725+1 CVEs