PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-72979 Microsoft CVE debrief

A critical vulnerability in Windows DHCP Server allows unauthorized attackers to execute code over a network. This CVE was published on 2026-09-08T18:20:24.310Z and was last modified on 2026-09-17T20:11:00.393Z. The vulnerability is a use-after-free issue, which could allow an attacker to execute code remotely. Defenders should assess exposure and prioritize patching vulnerable systems to prevent potential code execution. The CVSS score is 9.8, indicating critical severity. Affected versions include Windows 10 1607, Windows 10 1809, Windows Server 2012, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025.

Vendor
Microsoft
Product
Windows 10 Version 1607
CVSS
CRITICAL 9.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-08
Original CVE updated
2026-09-17
Advisory published
2026-09-08
Advisory updated
2026-09-17

Who should care

Defenders responsible for Windows DHCP Server instances should assess exposure and prioritize patching vulnerable systems. This includes verifying affected versions, applying vendor-provided security updates, and monitoring network traffic for potential exploitation attempts. Operators and security teams should review the vulnerability details and assess the potential impact on their environments. Platform and system

Why it matters

Defenders should prioritize patching vulnerable Windows DHCP Server instances to prevent potential code execution. This vulnerability has a critical CVSS score of 9.8 and affects multiple Windows versions.

  • Potential code execution over a network
  • Critical severity with CVSS score of 9.8
  • Affected versions require verification and patching

Technical summary

The vulnerability is a use-after-free issue in Windows DHCP Server, which could allow an unauthorized attacker to execute code over a network. The CVSS score is 9.8, indicating critical severity. Affected versions include Windows 10 1607, Windows 10 1809, Windows Server 2012, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025.

Defensive priority

Defenders should prioritize patching vulnerable Windows DHCP Server instances to prevent potential code execution.

Recommended defensive actions

  • Patch vulnerable Windows DHCP Server instances
  • Verify and apply vendor-provided security updates
  • Monitor network traffic for potential exploitation attempts

Evidence notes

The vulnerability is described as a use-after-free issue in Windows DHCP Server, which could allow an unauthorized attacker to execute code over a network. The CVSS score is 9.8, indicating critical severity.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-72979 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-72979

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-72979 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-72979

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.