Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What could an attacker do by exploiting this vulnerability?
An attacker who successfully exploited this vulnerability could change protected registry settings with the permissions of the Network Service account.
According to the CVSS metric, attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation requires a specially prepared configuration to be processed when the affected service restarts or the system reboots. The attacker must wait for that service-lifecycle event, which is not reliably under their control.
Security updates
10.0.14393.9688 — https://support.microsoft.com/help/5131291
10.0.17763.9487 — https://support.microsoft.com/help/5131085
10.0.20348.5870 — https://support.microsoft.com/help/5131090
10.0.26100.33822 — https://support.microsoft.com/help/5131080
10.0.26100.33730 — https://support.microsoft.com/help/5131077
Vulnerabilities 1
-
Medium 6.4
Windows DHCP Server Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-105588 Windows DHCP Server Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105588
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss