## Summary
CVE-2026-61361 describes a Windows DHCP Client vulnerability involving a use-after-free condition (CWE-416). An authorized local attacker can leverage the flaw to achieve local code execution.
## Technical Details
- Vulnerability class: CWE-416 (Use After Free)
- Affected component: Windows DHCP Client
- Root condition (per NVD): a memory object is freed while still being referenced, enabling attacker-influenced behavior.
- Preconditions (per NVD): attacker must be authorized and the attack is local.
## Affected
- Product scope: Windows DHCP Client (exact Windows versions/editions not provided in the available data).
## Impact
- Confidentiality: high impact (CVSS indicates C:H)
- Integrity: high impact (CVSS indicates I:H)
- Availability: high impact (CVSS indicates A:H)
- Overall: local code execution with full impact potential on affected systems.
## Mitigation
1. Apply the vendor’s security update/patch for CVE-2026-61361 as soon as it is available in your environment.
2. Reduce exposure by limiting who can be “authorized” on the target host (tighten local access controls and least privilege).
3. Monitor for suspicious local activity around DHCP client usage and related network configuration changes, and investigate anomalies consistent with local exploitation attempts.
4. If patching is not immediately possible, consider isolating affected systems and restricting DHCP-related operations to trusted administrative workflows.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416