The vulnerability is an out‑of‑bounds read bug in the Windows DNS server that can be triggered by an attacker with the ability to send DNS queries to the target. When exploited, the flaw causes the DNS service to crash or become unresponsive, resulting in a denial of availability for clients that rely on name resolution. The weakened code path corresponds to CWE‑125.

The flaw affects multiple Microsoft Windows releases, including Windows 10 versions 1607 and 1809 and Windows Server 2012 through 2025, covering both standard and Server Core configurations. No additional version exclusions are noted beyond the supplied vendor/product list.

The reported CVSS score of 6.5 indicates a moderate severity. The EPSS score of 1% indicates a low but non‑zero probability of exploitation. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog, implying no publicly known active exploits at the time of analysis. An attacker would require remote network access to the DNS service, typically through the ability to craft and send DNS requests, and the attack would be considered authenticated or authorized to the DNS interface.