An integer underflow (wrap or wraparound) in the Windows DHCP Server component allows an attacker to read memory contents located adjacent to legitimate data structures. This flaw can lead to the disclosure of sensitive information that resides in the server's memory, potentially revealing configuration details, user data, or other confidential material. Because the vulnerability is triggered by malformed DHCP packets, an adversary can extract this data without needing valid credentials.

Affected systems include Microsoft Windows 10 versions 1607 and 1809, and the Windows Server family from 2012 through 2025, including all core installations. These environments operate the Windows DHCP Server service and are vulnerable to the integer underflow flaw.

The CVSS score of 6.5 indicates a moderate severity, and the EPSS score of less than 1% suggests a low current exploitation probability. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is an adversary with access to the local or adjacent network that can send crafted DHCP packets to the vulnerable server. Successful exploitation would allow information disclosure without privileged access, directly impacting confidentiality of the server’s memory contents.