This vulnerability (CVE-2026-62823) involves a heap-based buffer overflow in the Windows DHCP Server on Windows 10 Version 1607 (build 10.0.14393.0). Exploitation could allow an unauthenticated attacker with adjacent network access to execute arbitrary code, impacting confidentiality, integrity, and availability. Microsoft has published an official fix to address this issue.

Successful exploitation can lead to remote code execution without user interaction or privileges, resulting in full system compromise including complete confidentiality, integrity, and availability loss on affected systems running Windows 10 Version 1607 (build 10.0.14393.0). No known exploits are currently reported in the wild.

An official fix is available from Microsoft. It is recommended to apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62823 to remediate this vulnerability.