CVE-2017-8686: Microsoft Windows Server 2012

Critical severity, CVSS 9.8. EPSS: 27.5% chance of exploitation in the next 30 days.

The Windows Server DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 allows an attacker to either run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresponsive, due to a memory corruption vulnerability in the Windows Server DHCP service, aka "Windows DHCP Server Remote Code Execution Vulnerability".

Affected products

• Microsoft Windows Server 2012: affected versions not specified; version r2 only
• Microsoft Windows Server 2016: any version

Published 2017-09-13. Last modified 2026-06-17.