Actively exploited in the wild
Microsoft Windows DNS Server Remote Code Execution Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2020-1350
CriticalCVSS 10.0KEVSummary
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.
Risk Assessment
An attacker can remotely execute arbitrary code on the DNS server, potentially leading to takeover of network infrastructure and privilege escalation.
Recommendation
Immediately install Microsoft security updates for Windows DNS servers or apply vendor-recommended workarounds.
Other vulnerabilities in Windows DNS Server
See all- CVE-2021-27063High
Denial of service vulnerability in Windows DNS Server. An attacker could exploit this vulnerability to cause the DNS service to become unavailable.
- CVE-2021-26897Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit it to execute code on the DNS server.
- CVE-2021-26896High
Denial of service vulnerability in Windows DNS Server. An attacker could exploit this vulnerability to cause the DNS service to become unavailable.
- CVE-2021-26895Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit it to execute code on the DNS server.
- CVE-2021-26894Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit this flaw to execute arbitrary code in the context of the service.
- CVE-2021-26893Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit this flaw to execute arbitrary code in the context of the service.
- CVE-2021-26877Critical
Remote code execution vulnerability in Windows DNS Server. An attacker could exploit it to execute code on the DNS server.
- CVE-2026-77505High
A use-after-free vulnerability in DNS Server allows an unauthorized attacker to execute code remotely over the network.
- CVE-2023-35346Medium
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
- CVE-2023-35345Medium
A vulnerability in the Windows DNS Server allows for remote code execution. An attacker can exploit this flaw to gain control over the system.
Original NVD description (English source)
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.