CVE-2026-88216
Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVSS
7.5
Alta
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-122 · CWE-367
Ainda não há histórico EPSS suficiente.
Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-500793.3 BAI—
——0Time-of-check Time-of-use (TOCTOU) Race Condition in the virtio network virtual device could allow an attacker in the guest to manipulate the virtual network device causing a crash of the QVM.3hCVE-2026-970156.8 MÉD—
——0Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.4hCVE-2026-969937.5 ALT—
——0Release of invalid pointer or reference in Windows Performance Monitor allows an unauthorized attacker to execute code over a network.4hCVE-2026-961847.8 ALT—
——0Heap-based buffer overflow in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.4hCVE-2026-961648.8 ALT—
——0Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.4hCVE-2026-961579.8 CRÍ—
——0Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.3h