CVE-2026-69342: CWE-125: Out-of-bounds Read in Microsoft Windows 10 Version 1607

This vulnerability, identified as CWE-125 (Out-of-bounds Read), exists in the Windows DHCP Server component of Microsoft Windows 10 Version 1607 and other specified versions. It allows an attacker without privileges to trigger an out-of-bounds read condition, resulting in denial of service (DoS) over the network. The CVSS 3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability does not impact confidentiality or integrity but affects availability. Multiple Windows versions are affected, with patches released to address the issue. Microsoft has published an official fix, and no known exploits are reported in the wild.

An attacker can exploit this vulnerability remotely without authentication to cause a denial of service condition on affected Windows DHCP Servers. This results in service disruption but does not compromise data confidentiality or integrity.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows versions to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69342 for update details and guidance.