Every CVE Search/ Get API key

CVE-2020-1350

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail...

10.0 CriticalIn KEVPublic exploit

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

96.7%Up 55.0 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 10.0

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

Record
CVE-2020-1350
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List 10.0

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

Record
CVE-2020-1350
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2020-12226 10.0

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

Record
EUVD-2020-12226
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-hcmx-443w-mr76 10.0

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail...

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

Record
GHSA-hcmx-443w-mr76
CVSS 3.1
10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-20, CWE-119, CWE-787
Updated
2026-11-02
CISA KEV No score

Microsoft Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.

Record
CVE-2020-1350
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubpsc4re/NSE-scripts2020-03-11
PoC in GitHubZephrFish/CVE-2020-1350_HoneyPoC2020-07-14
PoC in GitHubmr-r3b00t/CVE-2020-13502020-07-14
PoC in GitHubzoomerxsec/Fake_CVE-2020-13502020-07-14
PoC in GitHubT13nn3s/CVE-2020-13502020-07-15
PoC in GitHubcorelight/SIGRed2020-07-15
PoC in GitHubjmaddington/dRMM-CVE-2020-1350-response2020-07-15
PoC in GitHubmaxpl0it/CVE-2020-1350-DoS2020-07-15
PoC in GitHubcaptainGeech42/CVE-2020-13502020-07-16
PoC in GitHubconnormcgarr/CVE-2020-13502020-07-17
Show 6 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubgraph-inc/CVE-2020-13502020-07-18
PoC in GitHubCVEmaster/CVE-2020-13502020-07-19
PoC in GitHubgdwnet/cve-2020-13502020-07-22
PoC in GitHubsimeononsecurity/CVE-2020-1350-Fix2020-07-26
PoC in GitHubSheisback/CVE-2020-1350-Exploit2020-11-26
PoC in GitHubsty886/CVE-2020-1350-SigRed2026-03-07

History

History
RecordedChangedSources
exploitsPoC in GitHub
exploitation, exploits
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-1350 is a critical vulnerability (CVSS 10.0) in Microsoft Windows, published July 14, 2020. CISA lists it as known to be exploited, since November 3, 2021. EUVD reports exploitation since November 3, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 96.7%, the 99th percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open