A critical use after free vulnerability in Windows Deployment Services affects legacy Windows 10 and Server versions, enabling potential remote code execution.

The flaw exists within Windows Deployment Services, where a use after free error can be triggered by an unauthenticated attacker. This allows for remote code execution by sending specially crafted requests to the service.

With a CVSS score of 9.8, this vulnerability poses a critical risk to organizational infrastructure. Exploitation allows for full system compromise, which may lead to the loss of sensitive data, unauthorized access to critical deployment infrastructure, and the potential for widespread malware propagation.

Immediate Action: Deploy the latest security patches from Microsoft to all vulnerable Windows 10 and Windows Server instances.

Proactive Monitoring: Review logs for Windows Deployment Services to identify unexpected service crashes or unauthorized connection attempts.

Compensating Controls: If patching is delayed, restrict access to Windows Deployment Services to authorized network segments only, and employ network segmentation to isolate deployment servers.

Public Exploit Available: Unknown

This vulnerability requires immediate attention due to its critical severity and remote exploitability. Administrators should verify the patch status of all legacy servers and workstations listed in the affected versions to ensure protection.