The vulnerability is an out‑of‑bounds read within the DNS Server component that can be triggered by an authorized attacker. When an attacker supplies a specially crafted DNS query, the server reads memory beyond the intended buffer boundaries, enabling the disclosure of sensitive data such as configuration information or other internal memory contents. This flaw is categorized as CWE‑125, an out‑of‑bounds read, which directly undermines the confidentiality of the system.

Affected systems include Microsoft Windows 10 versions 1607, 1809, 21H2, 22H2, Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1, as well as Windows Server editions 2012, 2016, 2019, 2022, and 2025 in both full and Server Core installations. These platforms are listed across multiple architectures such as x86, x64, arm64, and arm64‑based systems.

The CVSS score of 6.5 indicates moderate severity, while the EPSS score is not available, suggesting limited public data on exploitation likelihood but indicating the risk could still be significant where DNS servers are exposed to hostile actors. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is network‑based: an attacker who can reach the DNS server and can authenticate or otherwise gain authorized access must send a crafted request that triggers the out‑of‑bounds read. Because the flaw requires authorized access, the risk is lower than a fully remote exploit, but it still permits confidential data disclosure if encountered.