The vulnerability is a race condition in Windows DNS that occurs when concurrent requests are handled without proper synchronization. The result is a temporary loss of availability for the DNS service, which can disrupt name resolution for any clients that rely on it. The weakness corresponds to CWE‑362 and permits an attacker to cause denial of service by triggering a failure in the DNS server's processing of queries. The affected control is the internal synchronization mechanism used during request handling.

Affected systems include Microsoft Windows 10 Version 1607 and Version 1809, as well as Windows Server 2012, 2012 R2, 2016, 2019, 2022, and 2025—including all server core installations. The vulnerability exists in the DNS component of each listed operating system and can be triggered remotely over the network.

The CVSS score of 5.9 indicates moderate severity. The EPSS score is less than 1 %, suggesting a low probability of exploitation in the wild, and the vulnerability is not listed in CISA’s KEV catalog. Exploitation requires network access to the vulnerable DNS service, but no elevated privileges are needed locally. The race condition can be triggered from outside the host, making it a network‑based denial of service vector that can affect availability for the entire domain the server serves. The likely attack vector is remote network traffic to the DNS service; this inference is based on the nature of the traffic that would trigger the race condition.