A single packet could permanently disconnect (DoS) a client from connecting to the server under default settings, and MSRC rated it as Moderate severity.
What a day! I'll disclose it later. They said it'll be addressed in a future release, but no credit and no bounty. Wow