The vulnerability is a buffer over‑read in Windows DHCP Server that allows an authorized attacker to cause a denial of service on an adjacent network. This weakness corresponds to CWE‑126, meaning an attacker can read memory beyond the bounds of a buffer, potentially disrupting DHCP service. The impact is that the DHCP service may fail, leading to loss of network connectivity or requiring a reboot of the server.

Affected products include Microsoft Windows 10 Version 1607 and 1809, various Windows Server editions—2012, 2012 R2, 2016, 2019, 2022, and 2025—including both standard and Server Core installations of each edition. All editions listed above are vulnerable to this buffer over-read denial of service attack.

The CVSS score of 5.7 indicates medium severity. EPSS data is not available, and the vulnerability is not listed in CISA KEV, suggesting no widespread exploitation yet. The attack vector is inferred to be local or within the same subnet: an authorized user can trigger the over‑read to interrupt DHCP service. because the vulnerability requires an authorized attacker, it is less likely to be remotely exploitable unless the attacker already has some local privileges.