The vulnerability is a missing authorization check in the Windows DNS Server that permits an authorized local attacker to tamper with DNS configuration. This flaw allows modification of DNS settings on the host but does not provide remote code execution.

Affected systems include Microsoft Windows 10 versions 1607 and 1809, and Windows Server editions from 2012 through 2025, whether fully installed or server‑core installations.

The CVSS score of 5.5 indicates a moderate severity, while the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires the attacker to have authorized local access, making it a local privilege escalation risk rather than a remote threat. The lack of a publicly disclosed exploit suggests the immediate likelihood of attack is lower but not negligible in environments where DNS servers run on systems with broader user privileges.