A use‑after‑free flaw in the Windows DHCP Client enables an attacker to cause arbitrary code execution by sending specially crafted DHCP packets from an adjacent network. The vulnerability is a combination of a race condition (CWE‑362) and improper memory management (CWE‑416). When triggered, the flaw can execute arbitrary code in the context of the DHCP client process, potentially compromising the system’s integrity.

Affected systems include Microsoft Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025, in both standard and Server Core editions running on x64 architecture.

The CVSS score of 8.8 categorizes the flaw as high severity, and the EPSS score is not available, indicating no measured exploit frequency. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is over an adjacent network: an attacker must be able to transmit malicious DHCP packets to the target server. Because the flaw targets a client‑side component that runs with the privileges of the DHCP client process, exploitation does not require elevated rights on the server, enabling remote code execution for any user on the same network segment.