The vulnerability is an out‑of‑bounds read in the Windows DNS Server that can be triggered by an attacker who can send crafted DNS requests. The read accesses memory beyond the intended bounds, potentially exposing sensitive data such as configuration, credentials or system state. It does not allow arbitrary code execution but results in a breach of confidentiality, classified as CWE‑125.

The flaw affects Microsoft Windows 10 from version 1607 through 22H2, Windows 11 from 23H2 through 26H2 (including ARM64 and x64 builds), and Windows Server editions 2012, 2012 R2, 2016, 2019, 2022 and 2025, both in standard and Server Core installations. All builds that include the DNS Server role are vulnerable, regardless of processor architecture.

The CVSS score of 6.5 indicates moderate severity, and the EPSS score is not available; the vulnerability is not listed in the CISA KEV catalog. Exploitation requires network access to the DNS server, typically from an authenticated user or host within the local network, to issue specially crafted queries that trigger the out‑of‑bounds read. While the attack can leak memory content, it does not provide code execution or privilege escalation. Given the absence of a public exploit and the possibility to block DNS traffic, the overall risk remains moderate but should be mitigated promptly.