PULSEUnderground Intel

LIVE38signals / 24h

FEED

ransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransombyod reclama a Providence · Healthcareransombyod reclama a Toyota · JP · Manufacturingransomorova reclama a Herminio India Precision Technology · IN · Manufacturingransomkrybit reclama a Actualize Consulting · US · Professional Servicesransomclimax inc reclama a Redacted Redactedransomclimax inc reclama a Nepal Electricity Authority · NP · Energy & Utilitiesransomclimax inc reclama a Frolina Home · BR · Retail & E-Commerceransombooba project reclama a COMPUTER TASK GROUP, Inc. · US · Technologyransombooba project reclama a Georgetown Sleep Center · US · Healthcareransombooba project reclama a Collier Sports Medicine and Orthopedic Center · US · Healthcareransombooba project reclama a El Portal Imaging Center · MX · Healthcareransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransombyod reclama a Providence · Healthcareransombyod reclama a Toyota · JP · Manufacturingransomorova reclama a Herminio India Precision Technology · IN · Manufacturingransomkrybit reclama a Actualize Consulting · US · Professional Servicesransomclimax inc reclama a Redacted Redactedransomclimax inc reclama a Nepal Electricity Authority · NP · Energy & Utilitiesransomclimax inc reclama a Frolina Home · BR · Retail & E-Commerceransombooba project reclama a COMPUTER TASK GROUP, Inc. · US · Technologyransombooba project reclama a Georgetown Sleep Center · US · Healthcareransombooba project reclama a Collier Sports Medicine and Orthopedic Center · US · Healthcareransombooba project reclama a El Portal Imaging Center · MX · Healthcare

CVE WatchNov 10, 2026

CVE-2026-118739

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent n

CVSS

6.5

Medium

EPSS

—

KEV

—

Exploit Today

0

0-100

Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-401

EPSS · 30d

Not enough EPSS history yet.

Technical description

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118739

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-961767.5 HIG

——0Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.4h CVE-2026-702407.5 HIG

——0Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.4h CVE-2026-1199725.9 MED

——0Uncontrolled resource consumption in Windows Remote Procedure Call allows an unauthorized attacker to deny service over a network.4h CVE-2026-1199556.0 MED

——0Uncontrolled resource consumption in Windows Hyper-V allows an authorized attacker to deny service locally.4h CVE-2026-1199095.9 MED

——0Uncontrolled resource consumption in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.4h CVE-2026-1141547.5 HIG

——0Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.3h