An out‑of‑bounds read in the Windows DNS Server component enables an attacker who has already authorized network access to read sensitive memory, thereby revealing confidential information. The flaw is classified as CWE‑125, indicating an improper handling of memory bounds that can lead to data exposure. The impact is a non‑confidentiality breach, potentially exposing network configuration, hostnames, or internal data that should remain private.

This vulnerability affects Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Windows Server editions 2012 (including Server Core), 2012 R2 (including Server Core), 2016, 2019, 2022, and 2025. All listed operating systems run the built‑in DNS Server service.

The CVSS score of 6.5 indicates a moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting it has not been widely exploited yet. The likely attack vector is a network‑based request to the DNS Server; the attacker must be able to send queries to the vulnerable DNS service. If successful, the attacker can read arbitrary portions of memory, gaining insight into the internal network state. The risk is significant for environments where DNS servers are exposed to untrusted networks or where sensitive data is present in memory.