An out‑of‑bounds read flaw in the Windows DNS Server allows an authorized attacker to read memory data over the network, revealing sensitive information. This is a boundary‑checking vulnerability (CWE‑125).

Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, 26H1; Windows Server 2012, 2012 R2, 2016, 2019, 2022, 2025, including their Server Core editions.

The CVSS score of 6.5 rates this vulnerability as moderate. The EPSS score is not available and it is not listed in the CISA KEV catalog, indicating no known mass exploitation. Attack requires the attacker to have authorized access to the affected system. Once triggered, the attacker can obtain data from memory that the DNS server is processing. It is inferred that the exploit could be triggered by a malicious DNS query from an attacker who has authorized network access to the server, because the description indicates that only authorized attackers can exploit the flaw.