Out‑of‑bounds reads in the Windows DNS Server component enable an attacker who already has authorized access to trigger a denial of service. The flaw causes the DNS service to read beyond the bounds of a buffer during request processing, which can lead to a crash of the DNS server process and temporary loss of name resolution for clients on the network.

The vulnerability affects Microsoft Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, Windows Server 2022 and Windows Server 2025, including Server Core installations of each edition.

The CVSS score of 6.5 indicates moderate severity. The EPSS score of 1% suggests a low probability of exploitation, and the vulnerability is not listed as a known exploited vulnerability by CISA. The attacker must have authorized, network‑level access to the targeted DNS server to trigger the crash, so the threat surface is primarily local or within trusted networks.