---
id: "CVE-2026-96115"
page: "https://infrastack.ai/live/CVE-2026-96115"
kind: "vulnerability"
aliases: ["CVE-2026-96115"]
title: "Windows DHCP Client: double free lets a local user gain higher privileges"
severity: "high"
cvss: 8.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["adjacent-network", "dhcp-client", "infrastructure", "local-privilege-escalation", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:22:09+00:00"
first_seen_at: "2026-11-10T19:25:31+00:00"
updated_at: "2026-11-10T19:47:23+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96115", "first_seen_at": "2026-11-10T19:25:31+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-10T19:47:23+00:00"}]
exploit_sources: []
---

# Windows DHCP Client: double free lets a local user gain higher privileges

Link for people: https://infrastack.ai/live/CVE-2026-96115 (this .md is for agents)

A double free bug in the Windows DHCP Client lets an authorized attacker on an adjacent network elevate their privileges. An attacker who can reach the machine on the local network and holds some access gets higher rights on that Windows system.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Unknown: the MSRC entry (msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96115) could not be read (JavaScript-only page). Check it for the KB per Windows build, then compare the installed update (Get-HotFix, or winver build number) against it.

## Timeline

- 2026-11-10T19:25:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-96115
- 2026-11-10T19:47:23+00:00 analyst — MSRC page returned no text and NVD page is empty, so no affected builds, fix KB or mitigations could be read; nothing verified. CVSS 8.0 AV:A/PR:L from Microsoft per collector. Revisit when MSRC text is reachable. Other DHCP client CVEs (CVE-2026-44815, -69777) are separate.

## From the sources

Double free in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_