This vulnerability involves an out-of-bounds read in the Windows DHCP Client component of Windows 10 Version 1607 (build 10.0.14393.0). An unauthorized attacker with local access can exploit this flaw to read memory outside the intended bounds, potentially disclosing sensitive information. The vulnerability is tracked as CWE-125 and has a CVSS 3.1 base score of 6.8, indicating a medium severity. Microsoft has released an official fix to address this issue.

An unauthorized local attacker can exploit this vulnerability to read memory beyond the allocated buffer in the DHCP Client, leading to information disclosure. There is no impact on integrity, but availability is rated high, indicating potential system instability or crashes. No known exploits are reported in the wild.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the security update provided by Microsoft to remediate this issue. Since the remediation level is official-fix and patchAvailable is true, applying the vendor's update is the recommended action.