A critical heap-based buffer overflow in the Windows DHCP Server, affecting various Windows 10 and Server editions, allows unauthenticated attackers to execute arbitrary code.

The vulnerability is a heap-based buffer overflow (CWE-122) within the Windows DHCP Server component. An unauthenticated attacker located on an adjacent network can trigger this flaw to execute arbitrary code.

The potential for unauthorized code execution poses a severe risk to organizational infrastructure, as attackers could gain full control over affected systems. With a CVSS score of 8.8, this vulnerability is categorized as high severity and requires immediate attention to prevent total system compromise, data theft, or lateral movement within the network.

Immediate Action: Administrators must apply the latest security updates provided by Microsoft in the official update guide to patch the affected Windows versions.

Proactive Monitoring: Monitor network traffic for unusual DHCP activity or anomalous system behavior that could indicate exploitation attempts.

Compensating Controls: Ensure that network segmentation is in place to limit exposure of DHCP servers to untrusted or unauthorized network segments.

Public Exploit Available: No (unknown)

Given the potential for remote code execution and the high CVSS score, this vulnerability should be prioritized for patching during the current maintenance cycle. System administrators should verify that all affected Windows 10 and Server instances are updated to the versions specified in the enrichment data to neutralize this risk.