CVE-2026-50518

CRITICAL

KISA

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

StatusAwaiting Analysis

설명

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

Score Summary

CVSS Score: 9.8
Version: 3.1
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 98.00
Exploitation signal(EPSS top 10%) ×1.10
VPI 100.00
VPI formula vpi-v1
EPSS: 7.4%
(상위 93.7%)
Attack Vector: Network
Low Complexity
No Privileges
No User Interaction
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Listed in KISA bulletin

This CVE is referenced in a KISA security bulletin (Korean only).

Vulnerability Lifecycle

CWE Weakness Classification

References (1)

KISA Listed

07/14/2026

Impact	98.00
Exploitation signal(EPSS top 10%)	×1.10
VPI	100.00