VulnSocial

CVE-2026-45602Disclosure(microsoft / windows_10_1607)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_10_1607 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network.

microsoft CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-349CWE-229

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_10_1607
  • windows_10_1809
  • windows_10_21h2
  • windows_10_22h2

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-06-09); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
microsoft
Products
windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_23h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2012windows_server_2016

2 versions affected across 13 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-06-09: 2Mentions · 2026-07-07: 1Patch / Workaround · 2026-06-09: 1Technical Details · 2026-06-09: 206-0907-07
Signal classification3 categories
Disclosure
133.3%
Patch
133.3%
General
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-092
Disclosure1Patch1
2026-07-071
General1
Full discourse3 posts
  • Horizon Secured@horizon_secured
    Disclosure

    🚨 𝗛𝗼𝗿𝗶𝘇𝗼𝗻 𝗔𝗹𝗲𝗿𝘁 – 𝗝𝘂𝗻𝗲 𝟮𝟬𝟮𝟲 𝗣𝗮𝘁𝗰𝗵 𝗧𝘂𝗲𝘀𝗱𝗮𝘆 After just one month without zero-days, we’re back to 𝟯 𝗻𝗲𝘄 𝘇𝗲𝗿𝗼-𝗱𝗮𝘆𝘀 and multiple nasty 9+ vulnerabilities. 𝗭𝗲𝗿𝗼-𝗗𝗮𝘆𝘀 🔸 CVE-2026-50507 – BitLocker Security Feature Bypass (YellowKey?) 🔸 CVE-2026-49160 – HTTP.sys Denial of Service 🔸 CVE-2026-45586 – CTFMON Elevation of Privilege 𝟵.𝟬+ 𝗩𝘂𝗹𝗻𝗲𝗿𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 🔹 CVE-2026-45602 – Windows DHCP Server Tampering (9.1) 🔹 CVE-2026-42904 – Windows TCP/IP Elevation of Privilege (9.6) 🔹 CVE-2026-44815 – Windows DHCP Client Remote Code Execution (9.8) 🔹 CVE-2026-45657 – Windows Kernel Remote Code Execution (9.8) 🔹 CVE-2026-47291 – HTTP.sys Remote Code Execution (9.8) Full breakdown in this month’s Horizon Alert. #PatchTuesday #CyberSecurity #ZeroDay #Vulnerability #Microsoft

    Post summary

    The tweet announces several new Microsoft zero‑day vulnerabilities, providing CVE IDs, brief descriptions, and severity scores, but offers no PoC, exploit, patch, or evidence of active exploitation.

    2201761.9K
    2.6K followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-45602: Windows DHCP Server Tampering Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04nM4Y10

    Post summary

    The text is a headline link, mentioning the CVE but providing no substantive details, PoCs, or updates on exploitation or fixes.

    0000033
    31 followersView on X
  • WindowsForum@windowsforum
    Patch

    🚨 CVE-2026-45602 is DHCP tampering with CVSS 9.1—and Microsoft’s “Important” is basically the shrug emoji. If it’s network-reachable, your LAN trust is the real target. https://windowsforum.com/threads/cve-2026-45602-patch-windows-dhcp-server-tampering-cvss-9-1-asap.424597/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #ServerSecurity #PatchTuesday #WindowsDhcp #Cve202645602 https://t.co/7ggUxE6zMl

    Post summary

    The tweet highlights a high‑severity DHCP tampering vulnerability in Windows DHCP servers (CVE‑2026‑45602) and directs readers to a forum thread that presumably contains a patch or workaround.

    0000035
    1.2K followersView on X
CPE platform detail20 entries

20 of 20 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_10_1607--x64
OSmicrosoftwindows_10_1607--x86
OSmicrosoftwindows_10_1809--x64
OSmicrosoftwindows_10_1809--x86
OSmicrosoftwindows_10_21h2--arm64
OSmicrosoftwindows_10_21h2--x64
OSmicrosoftwindows_10_21h2--x86
OSmicrosoftwindows_10_22h2--arm64
OSmicrosoftwindows_10_22h2--x64
OSmicrosoftwindows_10_22h2--x86
OSmicrosoftwindows_11_23h2---
OSmicrosoftwindows_11_24h2---
OSmicrosoftwindows_11_25h2---
OSmicrosoftwindows_11_26h1---
OSmicrosoftwindows_server_2012---
OSmicrosoftwindows_server_2012r2--
OSmicrosoftwindows_server_2016---
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---
OSmicrosoftwindows_server_2025---

Explore more

Back to dashboardmicrosoft CVEswindows_10_1607 vulnerabilities