CVE-2020-1350—Microsoft Windows DNS Server Remote Code Execution Vulnerability

PUBLISHEDvulnerability record
2021-11-03 · last modified December 22, 2025

Metadata

CVE ID:
CVE-2020-1350
Project:
Microsoft
Product:
Windows
Date Added:
2021-11-03
Due Date:
2022-05-03
Last Updated:
December 22, 2025

Vulnerability Name

Microsoft Windows DNS Server Remote Code Execution Vulnerability

Description

Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SIGRed.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

Apply updates per vendor instructions.

Additional Notes

  • Reference CISA's ED 20-03 (https://www.cisa.gov/news-events/directives/ed-20-03-mitigate-windows-dns-server-remote-code-execution-vulnerability-july-2020-patch-tuesday) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 20-03. https://nvd.nist.gov/vuln/detail/CVE-2020-1350
browse all CVEs