Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

According to the CVSS metric, the attack vector is network (AV:N), privilege required is none (PR:N), and user interaction is none (UI:N). What is the target used in the context of the remote code execution?
The attacker for this vulnerability could target the server accounts in an arbitrary or remote code execution and attempt to trigger malicious code in the context of the server's account through a network call. The attacker needs no privileges nor does the user need to perform any action.

Security updates
10.0.17763.4010 — https://support.microsoft.com/help/5022840
10.0.20348.1547 — https://support.microsoft.com/help/5022842
10.0.20348.1540 — https://support.microsoft.com/help/5022921
10.0.19042.2604 — https://support.microsoft.com/help/5022834
10.0.22621.1574 — https://support.microsoft.com/help/5022836
10.0.22621.1265 — https://support.microsoft.com/help/5022845
10.0.10240.19747 — https://support.microsoft.com/help/5022858
10.0.14393.5717 — https://support.microsoft.com/help/5022838
6.1.7601.26366 — https://support.microsoft.com/help/5022872
6.1.7601.26366 — https://support.microsoft.com/help/5022874
6.2.9200.24116 — https://support.microsoft.com/help/5022903
6.2.9200.24116 — https://support.microsoft.com/help/5022895
6.3.9600.20821 — https://support.microsoft.com/help/5022899
6.3.9600.20821 — https://support.microsoft.com/help/5022894