This vulnerability (CVE-2026-49181) involves an integer underflow (wrap or wraparound) in the Windows DHCP Client on Windows 10 Version 1607 (build 10.0.14393.0). Exploiting this flaw could allow an attacker without prior privileges to elevate their privileges remotely over a network. The CVSS v3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

Successful exploitation of this vulnerability could allow an unauthorized attacker to elevate privileges on the affected system remotely via the network. This could lead to increased control over the system without requiring prior authentication or user interaction. The confidentiality impact is high, while integrity and availability impacts are not affected according to the CVSS vector.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the security update provided by Microsoft as soon as possible to remediate this issue. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-49181 for detailed patch information and deployment instructions.