{"id":"CVE-2026-105560","aliases":[],"cve":{"records":[{"id":"CVE-2026-105560","source":"microsoft","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-05T16:02:13.156Z","published":"2026-11-10T18:19:52.936Z","modified":"2026-11-13T18:08:42.338Z"}],"publishers":[{"name":"microsoft","role":"CNA","organizationId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","modified":"2026-11-13T18:08:42.338Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-10T21:11:07.665Z"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105560","tags":["vendor-advisory","patch"],"source":"microsoft"}],"weaknesses":[{"id":"CWE-763","description":"CWE-763: Release of Invalid Pointer or Reference","source":"microsoft"},{"id":"CWE-122","description":"CWE-122: Heap-based Buffer Overflow","source":"microsoft"}],"applicability":[{"source":"microsoft","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.14393.0","versionEndExcluding":"10.0.14393.9688"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.14393.0","versionEndExcluding":"10.0.14393.9688"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.17763.0","versionEndExcluding":"10.0.17763.9487"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.17763.0","versionEndExcluding":"10.0.17763.9487"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.20348.0","versionEndExcluding":"10.0.20348.5870"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.26100.0","versionEndExcluding":"10.0.26100.33822"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.26100.0","versionEndExcluding":"10.0.26100.33822"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-10T21:03:30.508323Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Windows DHCP Server Remote Code Execution Vulnerability","titleSource":"microsoft","descriptionSource":"microsoft","description":"Release of invalid pointer or reference in Windows DHCP Server allows an authorized attacker to execute code over a network.","score":7.2,"severity":"high","published":"2026-11-10T18:19:52.936Z","modified":"2026-11-13T18:08:42.338Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Microsoft","name":"Windows Server 2016","platforms":["x64-based Systems"],"versions":[{"version":"10.0.14393.0","status":"affected","lessThan":"10.0.14393.9688","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-105560"},{"vendor":"Microsoft","name":"Windows Server 2016 (Server Core installation)","platforms":["x64-based Systems"],"versions":[{"version":"10.0.14393.0","status":"affected","lessThan":"10.0.14393.9688","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-105560"},{"vendor":"Microsoft","name":"Windows Server 2019","platforms":["x64-based Systems"],"versions":[{"version":"10.0.17763.0","status":"affected","lessThan":"10.0.17763.9487","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-105560"},{"vendor":"Microsoft","name":"Windows Server 2019 (Server Core installation)","platforms":["x64-based Systems"],"versions":[{"version":"10.0.17763.0","status":"affected","lessThan":"10.0.17763.9487","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-105560"},{"vendor":"Microsoft","name":"Windows Server 2022","platforms":["x64-based Systems"],"versions":[{"version":"10.0.20348.0","status":"affected","lessThan":"10.0.20348.5870","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-105560"},{"vendor":"Microsoft","name":"Windows Server 2025","platforms":["x64-based Systems"],"versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.33822","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-105560"},{"vendor":"Microsoft","name":"Windows Server 2025 (Server Core installation)","platforms":["x64-based Systems"],"versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.33822","versionType":"custom"}],"cpes":[],"source":"microsoft","url":"https://www.cve.org/CVERecord?id=CVE-2026-105560"}],"remediation":[],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105560"],"sources":[{"name":"CVE","id":"CVE-2026-105560","modified":"2026-11-13T18:08:42.338Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-105560"}],"assessments":[{"source":"microsoft","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","score":7.2}],"sourceAffected":[],"observedAt":"2026-11-13T18:21:17.084Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T03:35:31.150Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-12T07:40:54.363Z","attemptedAt":"2026-11-12T07:40:54.363Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-12T07:40:36.316Z","attemptedAt":"2026-11-12T07:40:36.316Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-12T07:40:36.343Z","attemptedAt":"2026-11-12T07:40:36.343Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-12T07:40:35.681Z","attemptedAt":"2026-11-12T07:40:35.681Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-98q8-cg2x-8v3r","url":"https://github.com/advisories/GHSA-98q8-cg2x-8v3r","modified":"2026-11-10T21:32:28Z","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-12T07:40:36.316Z"},{"source":"ENISA EUVD","id":"EUVD-2026-122046","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-122046","modified":"Nov 11, 2026, 5:15:17 PM","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","checkedAt":"2026-11-12T07:40:36.343Z"},{"source":"NVD","id":"CVE-2026-105560","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105560","modified":"2026-11-10T21:17:46.643","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-12T07:40:54.363Z"}],"aiSummary":{"text":"A weakness in Windows DHCP Server on Windows Server 2016, 2019, 2022, and 2025 allows an authorized attacker to execute code. The affected versions are prior to 10.0.14393.9688, 10.0.17763.9487, 10.0.20348.5870, and 10.0.26100.33822.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-10T21:36:07.461Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-105560"}]}}