Microsoft Windows DHCP Server Out-of-Bounds Read Vulnerability Allowing Information Disclosure

A vulnerability allowing out-of-bounds read has been identified in the Windows DHCP Server. This issue enables an authorized attacker to locally disclose information by reading a limited amount of data from the system's memory. The vulnerability is present in several versions of Windows Server and Windows 10.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure, allowing attackers to read data from the affected system's memory.

Remediation

Users can apply the security update for this vulnerability, which is included in the June 2026 Monthly Rollup. Instructions for downloading this update are available on the Microsoft Update Catalog.