The vulnerability is a stack-based buffer overflow in Windows DHCP Server. It allows an authorized network attacker to execute arbitrary code by sending specially crafted DHCP packets. This flaw can result in complete compromise of the affected system because the attacker can run code with the privileges of the DHCP service.

Affected products are Windows 10 (Versions 1607 and 1809) and Windows Server 2012 through 2025, including their Server Core installations.

The CVSS score of 8.8 indicates a high severity of the flaw. EPSS information is not available, and the issue is not listed in the CISA KEV catalog. The attack vector is inferred to be a network-based exploit that requires the attacker to send malicious DHCP requests to the vulnerable server, which is plausible given the server’s network exposure. The flaw can be leveraged by an attacker who can reach the DHCP service, making mitigations around network segregation especially important.