The out‑of‑bounds read occurs within Microsoft’s DNS Server component, allowing an attacker who can send queries to the server to read beyond intended memory boundaries and leak confidential information. This vulnerability is classified as CWE‑125 and results in the disclosure of data that should remain private. The likely attack vector is a remote DNS query from an authorized user within the network; the description states an authorized attacker can disclose information over a network, which implies the attacker must already have legitimate access to the DNS service but can exploit the flaw to view memory that belongs to other users or processes.

Affected systems include various releases of Windows 10 (1607, 1809, 21H2, 22H2), Windows 11 (23H2, 24H2, 25H2, 26H2 and certain arm64 and x64 variants), and multiple Windows Server editions from 2012 to 2025, as listed in the CNA vendor/product names. The vulnerability is present in the default DNS Server service shipped with these operating systems.

The CVSS score of 6.5 indicates medium severity, and the EPSS score is not available, so the current knowledge of exploitation frequency is limited. The vulnerability is not listed in the CISA KEV catalog. Because the attacker requires authorized access to the DNS server, the risk is elevated for systems that expose the service to untrusted users or sites. Prompt remediation via official patches is essential to prevent information leakage, especially in environments where the DNS server handles sensitive configuration or domain data.