High
Windows DHCP Server Elevation of Privilege Vulnerability
Type: advisorySources: Official CVE List
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
- Products
- Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows Server 2025, Windows Server 2025 (Server Core installation)
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-62761
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 2 Nov 2026, 13:24 UTC · Revision 2
Source evidence
Windows DHCP Server Elevation of Privilege Vulnerability
core-cve · Original sourcePublished 11 Aug 2026, 17:06 UTC
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
cve:CVE-2026-62761
Windows Server 2012
Fixed versions: Not specified
Windows Server 2012 (Server Core installation)
Fixed versions: Not specified
Windows Server 2012 R2
Fixed versions: Not specified
Windows Server 2012 R2 (Server Core installation)
Fixed versions: Not specified
Windows Server 2016
Fixed versions: Not specified
Windows Server 2016 (Server Core installation)
Fixed versions: Not specified
Windows Server 2019
Fixed versions: Not specified
Windows Server 2019 (Server Core installation)
Fixed versions: Not specified
Windows Server 2022
Fixed versions: Not specified
Windows Server 2025
Fixed versions: Not specified
Windows Server 2025 (Server Core installation)
Fixed versions: Not specified
Complete source record
{
"id": "74974dc663306ce41a8280fdcd9f0c8c5a1236d239fccc7e6b206ca9a7b061b7",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-62761",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Windows DHCP Server Elevation of Privilege Vulnerability",
"summary": "Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.",
"evidence": "cve:CVE-2026-62761",
"products": [
{
"name": {
"value": "Windows Server 2012",
"evidence": "/containers/cna/affected/0/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Windows Server 2012 (Server Core installation)",
"evidence": "/containers/cna/affected/1/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Windows Server 2012 R2",
"evidence": "/containers/cna/affected/2/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Windows Server 2012 R2 (Server Core installation)",
"evidence": "/containers/cna/affected/3/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Windows Server 2016",
"evidence": "/containers/cna/affected/4/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Windows Server 2016 (Server Core installation)",
"evidence": "/containers/cna/affected/5/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Windows Server 2019",
"evidence": "/containers/cna/affected/6/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Windows Server 2019 (Server Core installation)",
"evidence": "/containers/cna/affected/7/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Windows Server 2022",
"evidence": "/containers/cna/affected/8/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Windows Server 2025",
"evidence": "/containers/cna/affected/9/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Windows Server 2025 (Server Core installation)",
"evidence": "/containers/cna/affected/10/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2026-62761",
"aliases": [
"CVE-2026-62761"
],
"metrics": [
{
"format": "CVSS",
"cvssV3_1": {
"version": "3.1",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"
},
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"affected": [
{
"vendor": "Microsoft",
"product": "Windows Server 2012",
"versions": [
{
"status": "affected",
"version": "6.2.9200.0",
"lessThan": "6.2.9200.26280",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012 (Server Core installation)",
"versions": [
{
"status": "affected",
"version": "6.2.9200.0",
"lessThan": "6.2.9200.26280",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012 R2",
"versions": [
{
"status": "affected",
"version": "6.3.9600.0",
"lessThan": "6.3.9600.23338",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2012 R2 (Server Core installation)",
"versions": [
{
"status": "affected",
"version": "6.3.9600.0",
"lessThan": "6.3.9600.23338",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2016",
"versions": [
{
"status": "affected",
"version": "10.0.14393.0",
"lessThan": "10.0.14393.9418",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2016 (Server Core installation)",
"versions": [
{
"status": "affected",
"version": "10.0.14393.0",
"lessThan": "10.0.14393.9418",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2019",
"versions": [
{
"status": "affected",
"version": "10.0.17763.0",
"lessThan": "10.0.17763.9121",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2019 (Server Core installation)",
"versions": [
{
"status": "affected",
"version": "10.0.17763.0",
"lessThan": "10.0.17763.9121",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2022",
"versions": [
{
"status": "affected",
"version": "10.0.20348.0",
"lessThan": "10.0.20348.5499",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2025",
"versions": [
{
"status": "affected",
"version": "10.0.26100.0",
"lessThan": "10.0.26100.33296",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
},
{
"vendor": "Microsoft",
"product": "Windows Server 2025 (Server Core installation)",
"versions": [
{
"status": "affected",
"version": "10.0.26100.0",
"lessThan": "10.0.26100.33296",
"versionType": "custom"
}
],
"platforms": [
"x64-based Systems"
]
}
],
"modified": "2026-10-28T20:07:36.135Z",
"provider": "cve",
"references": [
"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62761"
],
"provider_metadata": {
"adp": [
{
"title": "CISA ADP Vulnrichment",
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"id": "CVE-2026-62761",
"role": "CISA Coordinator",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"version": "2.0.3",
"timestamp": "2026-08-12T03:59:20.258087Z"
}
}
}
],
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-08-12T13:42:13.069Z"
}
}
],
"cna": {
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
"shortName": "microsoft",
"dateUpdated": "2026-10-28T20:07:36.135Z"
}
}
},
"related_cves": [
{
"value": "CVE-2026-62761",
"evidence": "/cveMetadata/cveId"
}
],
"security_relevant": true,
"severity_evidence": "/containers/cna/metrics"
},
"source_id": "core-cve",
"document_id": 484728,
"published_at": "2026-08-11T17:06:09.978+00:00"
}