Technical Information

Brief overview of the risk:
A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited the vulnerability could run arbitrary code on the client machine.

Detailed Information on the risk:
To exploit the vulnerability, an attacker could send a specially crafted DHCP responses to a client.
The security update addresses the vulnerability by correcting how Windows DHCP clients handle certain DHCP responses.

Further information on this exploit is available at : CVE-2019-0697