CVE-2026-72979: CWE-416: Use After Free in Microsoft Windows 10 Version 1607

CVE-2026-72979 is a use-after-free vulnerability (CWE-416) in the Windows DHCP Server that enables remote code execution by an unauthenticated attacker over the network. The vulnerability affects several Windows 10 versions and related Windows releases, specifically those versions from 10.0.14393.0 up to but not including 10.0.14393.9512, 10.0.17763.0 up to 10.0.17763.9245, 6.2.9200.0 up to 6.2.9200.26349, 6.3.9600.0 up to 6.3.9600.23398, 10.0.20348.0 up to 10.0.20348.5622, and 10.0.26100.0 up to 10.0.26100.33438. The vulnerability allows an attacker to execute arbitrary code remotely without privileges or user interaction. Microsoft has published an official security update to fix this issue.

Successful exploitation of this vulnerability allows an unauthenticated attacker to execute arbitrary code remotely on affected systems, potentially leading to full system compromise including complete loss of confidentiality, integrity, and availability. The vulnerability is exploitable over the network without user interaction, making it highly dangerous in exposed environments.

Microsoft has released official security updates that address this vulnerability. It is strongly recommended to apply these patches immediately to affected systems. Since this is not a cloud service, remediation requires installing the vendor-provided updates. No additional vendor advisories indicate alternative mitigations or that the issue is already mitigated without patching.