The vulnerability is an out‑of‑bounds read within the Windows DNS Server process. An authorized attacker can trigger the server to read beyond its intended memory region, allowing disclosure of internal data to an attacker who communicates over a network. This flaw enables information disclosure without altering system state, consistent with CWE‑125.

Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1; Microsoft Windows Server 2012 (including Server Core), 2012 R2, 2016, 2019, 2022, 2025. All affected builds include the DNS Server service and may be vulnerable when it is active.

The CVSS score of 6.5 indicates a moderate impact. The vulnerability is not listed in the CISA KEV catalog, and no EPSS score is available. An attacker must be able to communicate with the DNS Server to exploit the flaw. The available information does not specify whether the attacker needs privileged or unauthenticated access, only that authorized access is required. Once the vulnerability is triggered, it results in the disclosure of data visible to the attacker.