CVE-2026-44815

Меры по смягчению последствий

What can customers do to mitigate this vulnerability?

Customers can reduce exposure by keeping the DHCP Client service enabled while avoiding use of the DhcpGetOriginalSubnetMask API. In this scenario, a malicious DHCP server may provide crafted data, but the data is not used unless that API is called.

To help reduce exposure, customers can:

1. Keep the DHCP Client service enabled so systems can continue to obtain network configuration normally.
2. Review applications or components that call the DhcpGetOriginalSubnetMask API.
3. Update or reconfigure those applications to avoid calling the API where possible.
4. Follow vendor or product guidance for any updates that address this behavior.

FAQ

How could an attacker exploit this vulnerability?

An attacker can exploit this by setting up a Dynamic Host Configuration Protocol (DHCP) Server on the network and responding to a request of information from DHCP client