The vulnerability is an out‑of‑bounds read in the Windows DNS server that can be exploited by an authorized attacker to cause arbitrary code execution on the target system. The weakness, identified as CWE‑125, allows the attacker to read unintended memory and then leverage that read to trigger execution of malicious code. Because of this, the confidentiality, integrity, and availability of the affected server are compromised, potentially allowing full control over the networked system.

Microsoft Windows Server 2022 and Microsoft Windows Server 2025 (including Server Core installations) are affected. No specific patch versions are listed, but all installations of these server releases are subject to the vulnerability and should be considered vulnerable until remedied.

The CVSS score of 6.5 classifies the issue as medium severity. EPSS score of 1% indicates a low exploitation probability, leaving the exploitation likelihood indeterminate. The vulnerability is not listed in CISA KEV. The attack vector is inferred to be network‑based, exploiting the DNS service, and requires the attacker to have authorized access to the server. Exploitation would involve sending a crafted DNS query that triggers the out‑of‑bounds read and leads to code execution.