Adjacent-network disclosure via integer underflow

Information disclosure in Windows DHCP Server before August 2026 updates allows adjacent attackers to read memory via crafted DHCP traffic. Microsoft has not disclosed the affected parser or function; public records state only that DHCP Server performs an arithmetic operation that underflows on attacker-controlled input and results in out-of-bounds reads. No authentication or user interaction is required, but reachability is limited to attackers on the same local network segment or equivalent adjacent broadcast domain as the DHCP service.