This vulnerability, tracked as CVE-2026-45602 and categorized under CWE-349 and CWE-229, affects the DHCP Server in Microsoft Windows 10 Version 1607 (build 10.0.14393.0). It arises from the acceptance of extraneous untrusted data combined with trusted data, enabling an unauthorized attacker to tamper with network communications. The CVSS v3.1 base score is 9.1, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality and integrity impacts. Microsoft has published an official fix to address this vulnerability.

Successful exploitation allows an attacker to tamper with network data on affected Windows 10 Version 1607 systems, potentially compromising confidentiality and integrity of network communications. There is no impact on availability. The vulnerability can be exploited remotely without authentication or user interaction.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45602 to remediate this issue.