Active Directory Will Execute Code From a Packet That Never Authenticated. Microsoft’s File Carries 8.1, Not 9.8.

An unauthenticated crafted packet becomes code execution in AD DS. Microsoft's record carries CVSS 8.1 with high attack complexity and no observed exploitation.