CVE-2026-69830

HighCVSS 8.1/10Last modified Oct 13, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-362CWE-416

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 13, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-698324.7Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose inforCVE-2026-698347.0Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.CVE-2026-6983610.0Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.CVE-2026-698387.0Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.CVE-2026-698396.5Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network.CVE-2026-69844.7A security flaw has been discovered in AstrBotDevs AstrBot up to 4.22.1. This affects the function create_template of the file astrbot/dashbCVE-2026-698407.0Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.CVE-2026-698417.8Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.CVE-2026-6984310.0Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a network.CVE-2026-698447.8Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.CVE-2026-698459.8Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.CVE-2026-698468.2Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-69830: High severity, CVSS 8.1 | Vulnix