Windows DHCP Server Remote Code Execution Vulnerability

An authenticated attacker with network access to a Windows DHCP server could trigger a double-free memory vulnerability to execute arbitrary code with system privileges, potentially disrupting network configuration services or gaining control of the server.

This affects IT administrators and network engineers responsible for Windows Server DHCP infrastructure, particularly those managing Windows Server 2016, 2019, 2022, or 2025, and Windows 10 systems providing DHCP services. Municipal utilities, water authorities, and other critical infrastructure operators running these systems for network management should assess exposure.

An attacker with valid credentials on the network sends a specially crafted DHCP packet or network request to the DHCP server. The double-free vulnerability in memory management allows the attacker to execute arbitrary code with the privileges of the DHCP service. This could enable the attacker to alter IP address assignments, disable DHCP services to devices on your network, or gain control of the server itself.