The vulnerability is a use‑after‑free flaw in the Windows DHCP Server component that permits an attacker with local authorized access to gain elevated privileges on the affected host. The flaw allows the attacker to exploit a memory state that has already been freed, resulting in execution of malicious code at higher privilege levels. This could enable the attacker to compromise system integrity or to configure the DHCP service to undermine network operations.

Affected systems include Microsoft Windows 10 version 1607 and 1809, Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025, along with their Server Core editions. All versions listed are impacted by the flaw as identified by Microsoft.

The CVSS score of 7.0 indicates a moderate to high severity. No EPSS score is available, so the likelihood of exploitation remains uncertain but the feature is not listed in the CISA KEV catalog, suggesting no active exploitation has been reported. Based on the description, the likely attack vector is local; an attacker must already possess authorized privileges on the machine to exploit the use‑after‑free condition, and then elevate those privileges to system‑level access.