AI analysis
CVE-2026-70250 is a use-after-free flaw (CWE-416), also associated with a race condition (CWE-362), in the Microsoft Windows DHCP Client. An unauthorized attacker on an adjacent network can trigger it without privileges or user interaction (CVSS 3.1 8.8, AV:A/AC:L/PR:N/UI:N/S:U) and gain high-impact code execution on the affected system, with confidentiality, integrity, and availability all rated high. Windows systems that use the built-in DHCP client are in scope; the supplied data does not list specific version ranges and ties the issue to Microsoft's October 2026 Patch Tuesday updates. Exploitation requires adjacency to the target (same local network), not remote internet access alone. It is not listed in CISA KEV, and no public proof-of-concept is known.
What to do: Install Microsoft's October 2026 security updates that address CVE-2026-70250 on all supported Windows systems that run the DHCP client. Prioritize devices on shared or untrusted local networks (guest Wi-Fi, branch sites, conference networks), where an adjacent attacker can reach the client without credentials or user interaction. No public exploit or CISA KEV listing was indicated in the supplied data, but the high CVSS score still warrants prompt patching.
Affected
| Microsoft Windows DHCP Client | — |
Estimated exposure
massHundreds of millions of Windows installations (order-of-magnitude estimate; exact vulnerable builds not listed) — The Windows DHCP client is installed and typically enabled by default on consumer and enterprise Windows endpoints; the global Windows install base is on the order of hundreds of millions of devices, though the exact vulnerable build range…
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.