The flaw is an integer underflow (wrap) in the Windows DHCP Server that lets an attacker send malformed DHCP packets from an adjacent network. The wrap causes the server to read memory beyond its bounds, exposing internal data such as configuration and assignment information. This leads to unauthorized disclosure of DHCP server data, a classic information‑disclosure issue rooted in CWE‑125 and CWE‑191.

The vulnerability affects Microsoft Windows 10 build 1607 and 1809, and all Windows Server editions from 2012 through 2025, including both full installations and Server Core. The affected component is the built‑in DHCP Server service that runs on these operating systems.

CVSS v3 score of 6.5 indicates moderate severity. The EPSS score is less than 1%, suggesting that the current exploitation probability is low. It is not listed in the CISA KEV catalog, meaning no large‑scale known attacks have been reported. The attack vector would require the attacker to be on the same LAN segment as the DHCP server and to craft malicious packets that trigger the integer wrap, so it requires local network proximity and specialized packets.