Stack-based buffer overflow in the Windows DHCP Client Service permits an unauthorized attacker to execute arbitrary code on the target machine. The flaw occurs when a crafted DHCP packet is processed, causing a stack overflow that can be exploited to gain local system privileges. The vulnerability allows an attacker to compromise the confidentiality, integrity, and availability of the affected system by executing malicious code within the context of the DHCP client service.

Microsoft Windows 10 from version 1607 through 22H2, Windows 11 from version 23H2 through 26H1, and all supported Windows Server releases from 2012 to 2025 are affected. These include both standard and Server Core installations. The vulnerability is present across x86, x64, and arm64 architectures as indicated in the product support matrix.

The CVSS score of 9.8 indicates critical severity. The EPSS score is unavailable, so the current exploitation probability is unknown but the vulnerability can be leveraged in a network setting without authentication. The flaw does not appear in CISA’s KEV catalog, but its high severity and network exploitation vector make it a prime target for attackers. An adversary can send a malicious DHCP packet from any location on the network that can reach the vulnerable host, making the risk high for environments with uncontrolled DHCP traffic.