This vulnerability (CVE-2026-44815) involves a stack-based buffer overflow in the Windows DHCP Client on Windows 10 Version 1607 (build 10.0.14393.0). An attacker can exploit this remotely over the network to execute arbitrary code, potentially leading to full system compromise. The CVSS 3.1 base score is 9.8, indicating critical severity with network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Microsoft has released an official fix for this vulnerability.

Successful exploitation allows remote code execution by an unauthenticated attacker over the network, potentially resulting in complete compromise of the affected system's confidentiality, integrity, and availability.

An official patch is available from Microsoft to remediate this vulnerability. Users and administrators should apply the update for Windows 10 Version 1607 (build 10.0.14393.0) as provided in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-44815.