An out‑of‑bounds read bug in the Windows DNS Server enables an authorized attacker to read memory contents beyond the intended bounds of a buffer. The flaw, catalogued as CWE‑125, can expose sensitive system data and other information that resides in memory. While it does not grant arbitrary code execution, the ability to retrieve arbitrary data can support further reconnaissance or enable additional attacks.

The vulnerability affects a wide range of Microsoft Windows operating systems. All listed builds of Windows 10—versions 1607, 1809, 21H2, and 22H2—are vulnerable. Windows 11 versions 23H2, 24H2, 25H2, 26H2, and the 26H1 release are also impacted. In the Server line, Windows Server 2012, 2012 R2, 2016, 2019, 2022, and the forthcoming 2025 releases, including their server‑core installations, are affected.

The CVSS score of 6.5 places this vulnerability in the moderate severity range. The CVE description states that an authorized attacker can disclose information over a network, implying that the attacker must have legitimate or compromised administrative access to the DNS Server. Because the EPSS score is not provided and the vulnerability is not listed in the CISA KEV catalog, there is currently little evidence of widespread exploitation. Nevertheless, the ability to read arbitrary memory from a critical service could aid adversaries in gathering intelligence or building more sophisticated attacks.