CVE-2020-1350

🔥 Known Exploited (CISA KEV)CRITICAL

10.0

CVSS Severity Score

EPSS Score58.7380%

EPSS Percentile86.58th

Published2020-07-14

Last Modified2025-12-18

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

Affected Platforms (CPE)

💻

Microsoft

Windows Server 2008

All versions= r2

💻

Microsoft

Windows Server 2012

All versions= r2

💻

Microsoft

Windows Server 2016

All versions

💻

Microsoft

Windows Server 2019

All versions

References & Advisories

🔗 http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350

🔗 http://packetstormsecurity.com/files/158484/SIGRed-Windows-DNS-Denial-Of-Service.html

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1350

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1350

CVE-2020-1350

Vulnerability Description

Affected Platforms (CPE)

Windows Server 2008

Windows Server 2012

Windows Server 2016

Windows Server 2019

References & Advisories

相關資安分析文章

每日全球网络威胁情报摘要｜2026 年 7 月 28 日

周度网络安全新闻：2026 年 7 月 27 日

每日全球网络威胁情报摘要｜2026 年 7 月 24 日

相关漏洞威胁