It absolutely does, in the "FAQ" section:

https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...

> How could an attacker exploit this vulnerability?

> An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..