{"affected":[{"affectedData":[{"product":"Windows","vendor":"Microsoft","versions":[{"status":"affected","version":"10 Version 1803 for 32-bit Systems"},{"status":"affected","version":"10 Version 1803 for x64-based Systems"},{"status":"affected","version":"10 Version 1803 for ARM64-based Systems"},{"status":"affected","version":"10 Version 1809 for 32-bit Systems"},{"status":"affected","version":"10 Version 1809 for x64-based Systems"},{"status":"affected","version":"10 Version 1809 for ARM64-based Systems"}]},{"product":"Windows Server","vendor":"Microsoft","versions":[{"status":"affected","version":"version 1803  (Core Installation)"},{"status":"affected","version":"2019"},{"status":"affected","version":"2019  (Core installation)"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*","matchCriteriaId":"7CB85C75-4D35-480E-843D-60579EC75FCB","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*","matchCriteriaId":"6B8F3DD2-A145-4AF1-8545-CC42892DA3D1","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*","matchCriteriaId":"CAACE735-003E-4ACB-A82E-C0CF97D7F013","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","matchCriteriaId":"3E4E76DC-838A-46D7-BC09-E2C149699050","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka 'Windows DHCP Client Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0698, CVE-2019-0726."},{"lang":"es","value":"Existe una vulnerabilidad de corrupción de memoria en el cliente DHCP de Windows cuando un atacante envía respuestas DHCP especialmente creadas a un cliente, se conoce como \"Windows DHCP Client Remote Code Execution Vulnerability\". Este ID de CVE es diferente de los CVE-2019-0698, CVE-2019-0726."}],"id":"CVE-2019-0697","lastModified":"2026-06-17T02:08:42.980","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":7.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-04-09T00:29:00.653","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0697"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0697"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"nvd@nist.gov","type":"Primary"}]}