The vulnerability is a heap-based buffer overflow within the Windows DNS Server. When the server processes certain network packets, an attacker can invoke the overflow, potentially leading to arbitrary code execution with the privileges of the server process. This kind of weakness is identified as CWE-122 (Heap Based Buffer Overflow) and CWE-197 (Numeric Truncation). The vulnerability description indicates that an unauthorized attacker can execute code over a network.

The flaw affects Microsoft Windows 10 versions 1607 and 1809 and Windows Server 2012 through 2025, including both full system and Server Core installations, whenever the Windows DNS Server service is running. Any host requiring DNS Services on these OS versions is potentially vulnerable until a security update is applied.

With a CVSS score of 9.8 the potential impact is severe, allowing full compromise of the affected machine. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, but the lack of these metrics does not lower the inherent risk. The attack vector is network-based; an attacker only needs to reach the DNS Server and send a malformed request. Local privilege escalation is not required. Successful exploitation results in the attacker gaining complete code execution under the DNS Server process privileges.