The vulnerability is an out‑of‑bounds read in the Windows DNS Server code that permits an authorized attacker to read memory contents and expose sensitive information across the network. This weakness is classified as CWE-125. The flaw originates from improper bounds checking of a buffer during DNS request processing, which can be exploited to retrieve arbitrary data from the server process. The consequences include disclosure of potentially confidential data stored in the DNS Server memory such as internal network state, configuration details, or other runtime information, thereby compromising confidentiality for the affected system.

Affected instances include multiple releases of Microsoft Windows 10 (Versions 1607, 1809, 21H2, 22H2), Windows 11 (Versions 23H2, 24H2, 25H2, 26H2, 26H1), and Windows Server editions (2012 through 2025 across all variants). Both 32‑bit and 64‑bit architectures are impacted, with ARM64 also referenced for recent Windows 11 builds. The vulnerability impacts the DNS Server service on these operating systems.

The CVSS base score of 6.5 indicates a moderate severity, and the vulnerability requires that the attacker already has authorized access to the DNS Server, which narrows the threat surface. The EPSS score is unavailable, but the lack of inclusion in CISA KEV suggests current exploitation risk is low. Nonetheless, the service could be leveraged by credentialed insiders or compromised systems within the same network segment to read memory data. Prompt patching is advised to eliminate this disclosure vector.