Out-of-bounds read in the Windows DNS Server allows an authorized attacker to read memory beyond buffer limits, resulting in disclosure of potentially sensitive data. The vulnerability is triggered by malformed DNS queries processed by the server and is classified as an information disclosure flaw (CWE-125).

Affected vendors and products include Microsoft Windows client operating systems ranging from Windows 10 version 1607 through 22H2 and Windows 11 versions 23H2 to 26H2, as well as Microsoft Windows Server editions from Server 2012 (incl. Server Core) through Server 2025 (incl. Server Core). The vulnerability applies to all specified builds for x86, x64, and ARM64 architectures where applicable.

The CVSS score of 6.5 indicates moderate severity. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, suggesting a relatively low likelihood of widespread exploitation. The likely attack vector is network-based, requiring the attacker to send crafted DNS queries to the vulnerable server. If successful, the attacker can read memory data that may include configuration or user information, but only on systems where the DNS service is enabled and reachable.