The vulnerability is yet to be patched by Microsoft and works on Windows 7/8.1 and Windows 10.
Supposedly, the patch will be released next Tuesday.
Proof-of-concept
Microsoft Windows fails to properly handle traffic from a malicious server.
source: www.techworm.net