{"id":"CVE-2026-119890","kind":"vulnerability","aliases":["CVE-2026-119890"],"related":[],"title":"Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over a network","description":"Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over a network.","summary":null,"severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":[],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:09+00:00","first_seen_at":"2026-11-10T19:25:01+00:00","triaged_at":null,"updated_at":"2026-11-10T19:39:26+00:00","category":null,"confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-119890':22A,25A '-2026':21A,24A 'allow':10A,35C 'attack':13A,38C 'author':12A,37C 'bound':4A,29C 'cve':20A,23A 'deni':15A,40C 'dhcp':8A,33C 'network':19A,44C 'out-of-bound':1A,26C 'read':5A,30C 'server':9A,34C 'servic':16A,41C 'window':7A,32C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":[],"ptokens":[],"labels":["medium"],"campaign_type":null,"search_a":"'-119890':22A,25A '-2026':21A,24A 'allow':10A 'attack':13A 'author':12A 'bound':4A 'cve':20A,23A 'deni':15A 'dhcp':8A 'network':19A 'out-of-bound':1A 'read':5A 'server':9A 'servic':16A 'window':7A","search_b":"","search_c":"'allow':35C 'attack':38C 'author':37C 'bound':29C 'deni':40C 'dhcp':33C 'network':44C 'out-of-bound':26C 'read':30C 'server':34C 'servic':41C 'window':32C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:09+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119890","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119890","severity":null,"published_at":"2026-11-10T19:20:09+00:00","modified_at":"2026-11-10T19:20:09+00:00","first_seen_at":"2026-11-10T19:25:01+00:00","fetched_at":"2026-11-10T19:25:01+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}