Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Are there any special conditions necessary for this vulnerability to be exploitable?
Yes. This vulnerability is only exploitable if the MaxReceiveBuffer LDAP policy is set to a value higher than the default value. Systems with the default value of this policy would not be vulnerable.
For more information, please see LDAP policies.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to prepare the target environment to improve exploit reliability.

How could an attacker exploit this vulnerability?
An authenticated attacker would need to send a specially crafted request to a vulnerable LDAP server.

Security updates
10.0.17763.3046 — https://support.microsoft.com/help/5014692
10.0.19043.1766 — https://support.microsoft.com/help/5014699
10.0.20348.770 — https://support.microsoft.com/help/5014678
10.0.20348.770 — https://support.microsoft.com/help/5014677
10.0.22000.739 — https://support.microsoft.com/help/5014697
10.0.10240.19325 — https://support.microsoft.com/help/5014710
10.0.14393.5192 — https://support.microsoft.com/help/5014702