Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to win a race condition.

How could an attacker exploit this vulnerability?
An unauthenticated attacker could send a specially crafted protocol message to a Routing and Remote Access Service (RRAS) server, which could lead to remote code execution (RCE) on the RAS server machine.

Security updates
10.0.17763.3287 — https://support.microsoft.com/help/5016623
10.0.19043.1889 — https://support.microsoft.com/help/5016616
10.0.20348.887 — https://support.microsoft.com/help/5016627
10.0.22000.856 — https://support.microsoft.com/help/5016629
10.0.10240.19387 — https://support.microsoft.com/help/5016639
10.0.14393.5291 — https://support.microsoft.com/help/5016622
6.1.7601.26065 — https://support.microsoft.com/help/5016676
6.1.7601.26065 — https://support.microsoft.com/help/5016679
6.3.9600.20520 — https://support.microsoft.com/help/5016681
6.3.9600.20520 — https://support.microsoft.com/help/5016683
6.0.6003.21616 — https://support.microsoft.com/help/5016669
6.0.6003.21616 — https://support.microsoft.com/help/5016686
6.2.9200.23817 — https://support.microsoft.com/help/5016672
6.2.9200.23817 — https://support.microsoft.com/help/5016684