Use after free in the Windows DHCP Server allows an attacker with network access to execute arbitrary code, potentially achieving full control of the server. The flaw occurs when the server processes a DHCP request and accesses memory that has already been freed, enabling the attacker to hijack execution flow. This grants code execution with the privileges of the DHCP Server process, which can be elevated to system level, thereby compromising the confidentiality, integrity and availability of the host.

All Microsoft Windows Server releases from 2012 through 2025, including Server Core installations, are affected. The issue spans 64‑bit operating systems as reflected in the CPE entries.

The risk is high with a CVSS score of 8.1. EPSS is not available, so the current exploitation probability is unknown, and the vulnerability is not in the CISA KEV catalog. The likely attack vector is via the network; this inference is drawn from the description that the attacker can trigger the flaw by sending crafted DHCP requests over a network.