CVE-2026-105588

Vendor

Microsoft

Product

Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation)

CVSS v3.1

6.4 AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-306

Exposure class

Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   Advisory MSRC 5h ago

   Windows DHCP Server Elevation of Privilege Vulnerability

   Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

   CVE-2026-105588 Microsoft
2. 35
   CVE NVD 2h ago

   Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

   Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

   CVSS 6.4 CVE-2026-105588 Microsoft