High8.8Vendor: CriticalMicrosoft Server Updated
DHCP Server Service Remote Code Execution Vulnerability
CVE-2026-48564 Published Jul 14, 2026Updated by vendor Jul 14, 2026
Affected products & platforms
Microsoft ServerWindows Server
Summary
DHCP Server Service Remote Code Execution Vulnerability Affected products named by the advisory: Windows Server 2019; Windows Server 2022; Windows Server 2025; Windows Server 2016; and 2 more. Affected products named by the advisory: Windows Server 2012 R2.
Affected versions
- Windows 10 Version 1607 10.0.14393.0
- Windows 10 Version 1809 10.0.17763.0
- Windows Server 2012 6.2.9200.0
- Windows Server 2012 (Server Core installation) 6.2.9200.0
- Windows Server 2012 R2 6.3.9600.0
- Windows Server 2012 R2 (Server Core installation) 6.3.9600.0
- Windows Server 2016 10.0.14393.0
- Windows Server 2016 (Server Core installation) 10.0.14393.0
- Windows Server 2019 10.0.17763.0
- Windows Server 2019 (Server Core installation) 10.0.17763.0
- Windows Server 2022 10.0.20348.0
- Windows Server 2025 10.0.26100.0
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Fixed versions
- KB5099538 (build 10.0.17763.9020)
- KB5099540 (build 10.0.20348.5386)
- KB5099536 (build 10.0.26100.33158)
- KB5099535 (build 10.0.14393.9339)
- KB5094042 (build 6.2.9200.26132)
- KB5094041 (build 6.3.9600.23228)
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Mitigation checklist
Recommended fix / mitigation
- Install the applicable security update for your platform: KB5099538, KB5099540, KB5099536, KB5099535, KB5094042, KB5094041 (see the Microsoft Update Catalog).
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.