The flaw is an out‑of‑bounds read in the Windows DNS Server code that allows an attacker who is authorized to read more data than intended from memory. This results in the disclosure of arbitrary network information, which can expose sensitive data and aid further compromise. The weakness is reflected in CWE‑125, indicating a buffer over‑read condition.

Affected products are Microsoft Windows 10 (Versions 1607, 1809, 21H2 and 22H2) and Windows 11 (Versions 23H2, 24H2, 25H2, 26H2, 26H1). Server editions impacted include Windows Server 2012, 2012 R2, 2016, 2019, 2022 and 2025. The CPE list confirms support for both x86 and x64 architectures as well as ARM64 for Windows 11.

With a moderate CVSS score of 6.5 and an unavailable EPSS value, the risk is considered medium. The vulnerability is not listed in CISA’s KEV catalog, suggesting no widespread exploitation is known at this time. An attacker must have legitimate DNS Server privileges to trigger the out‑of‑bounds read; from there they can learn sensitive network-level data. Because the required condition is elevated local rights, the threat is confined to environments where users can query the local DNS service.