Local privilege escalation via numeric truncation

Elevation of privilege in Windows DNS in Microsoft Windows allows local users to gain higher privileges via a numeric truncation error. Microsoft has not disclosed which Windows DNS code path truncates attacker-controlled numeric input or how the truncated value is later reused, so the specific failing function remains undisclosed. The published CVSS vector requires local access and high privileges, which bounds exposure to already authenticated code or users on affected Windows hosts rather than remote network attackers.