CVE-2026-88216
Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVSS
7.5
High
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-122 · CWE-367
Not enough EPSS history yet.
Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-500793.3 LOW—
——0Time-of-check Time-of-use (TOCTOU) Race Condition in the virtio network virtual device could allow an attacker in the guest to manipulate the virtual network device causing a crash of the QVM.3hCVE-2026-970156.8 MED—
——0Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.4hCVE-2026-969937.5 HIG—
——0Release of invalid pointer or reference in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.4hCVE-2026-961847.8 HIG—
——0Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.4hCVE-2026-961648.8 HIG—
——0Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.4hCVE-2026-961579.8 CRI—
——0Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.3h