The vulnerability originates from an out‑of‑bounds read in the DNS Server component. An attacker with authorized network access can read memory outside the intended buffer boundaries and expose sensitive information. The flaw aligns with CWE‑125, and while it does not lead to code execution, it permits leakage of potentially confidential data from the DNS Server process.

Microsoft Windows 10 (1607, 1809, 21H2, 22H2), Windows 11 (23H2, 24H2, 25H2, 26H2, 23H2, 26H1), Windows Server 2012, Server 2012 R2, Server 2016, Server 2019, Server 2022, Server 2025 (core and non‑core).

The CVSS score of 6.5 indicates moderate severity, and the exploit probability (EPSS) is not available. The vulnerability is not listed in CISA KEV. The likely attack vector is network‑based, requiring an attacker that can send DNS queries from an authorized or compromised network source. Although it does not grant code execution, the ability to read memory from the DNS Server process could lead to disclosure of sensitive data and potential downstream compromise. Patching remains the most effective mitigation.