The vulnerability is an out‑of‑bounds read in the Windows DNS Server component, permitting an authenticated attacker to read memory beyond allocated bounds and disclose information across the network. This buffer under‑read (CWE-125) results in partial information disclosure and may reveal sensitive data but does not specify particular configuration details.

Affected systems include Microsoft Windows 10 versions 1607, 1809, 21H2, and 22H2; Microsoft Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Microsoft Windows Server releases 2012, 2012 R2, 2016, 2019, 2022, and 2025, including both standard and Server Core installations, on x86 and ARM64 platforms where applicable.

With a CVSS score of 6.5, the flaw is considered of moderate severity. The EPSS score is not available, so exploitation likelihood is uncertain, and the vulnerability is not listed in the CISA KEV catalog. Attackers need network authentication that allows DNS queries, so the primary attack vector is a network‑based, authenticated approach. If exploited, the attacker can expose sensitive information which could facilitate further attacks against the affected systems.