Windows Shell Elevation of Privilege Vulnerability
CVE-2026-97013
Summary
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
Products covered
Windows 11 Version 24H2 for ARM64-based Systems
Windows 11 Version 24H2 for x64-based Systems
Windows 11 Version 25H2 for ARM64-based Systems
Windows 11 Version 25H2 for x64-based Systems
Windows Server 2025
Windows Server 2025 (Server Core installation)
Windows 11 Version 26H1 for ARM64-based Systems
Windows 11 version 26H1 for x64-based Systems
Remediation
Install KB5121003. Install KB5120994. Install KB5120233. Install KB5120228. Install KB5121000.
Vendor-listed fixes
10.0.26100.9168
10.0.26100.9106
10.0.26200.9168
10.0.26200.9106
10.0.26100.33296
10.0.26100.33222
10.0.28000.2704
CVEs in this advisory 1
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.