Windows CVE-2025-33050

The CVSS score of 7.5 (High severity) combined with the network-based, unauthenticated attack vector (AV:N/PR:N/UI:N) indicates substantial real-world risk. The complete lack of required privileges or user interaction significantly lowers the exploitation barrier. However, the impact is constrained to availability (A:H) with no confidentiality or integrity compromise (C:N/I:N), suggesting this is a denial-of-service vector rather than data breach or system compromise risk. Without explicit EPSS probability data, the network-accessible, authentication-free nature strongly suggests high exploitation probability. If this CVE has KEV (Known Exploited Vulnerability) status or public POC availability, it should be treated as an immediate critical priority for patching. Organizations running DHCP servers on internet-facing or untrusted network segments face direct risk. The real-world impact depends on alternative DHCP availability—organizations with redundant DHCP servers face reduced severity compared to single-server deployments.

An attacker positioned on the network (or remotely if the DHCP server is internet-accessible) crafts malicious DHCP packets designed to trigger the protection mechanism failure. For example, the attacker might send specially formatted DHCP DISCOVER, REQUEST, or DECLINE messages with abnormal field values or excessive size that bypass input validation. The DHCP server processes these packets without proper sanitization, causing a crash, memory exhaustion, or infinite loop that consumes CPU resources. As a result, legitimate clients cannot obtain IP addresses from the DHCP server, causing network connectivity loss across dependent systems. In a corporate environment, this could disrupt office network access; in cloud infrastructure, it could impact VM provisioning and networking. If a public POC exists, opportunistic attackers scanning the internet for vulnerable DHCP servers could exploit this at scale with minimal effort due to the low attack complexity.