CVE-2020-1350

State: Published
Severity: 10.0 Critical
Published: Jul 14, 2020
Updated: Oct 21, 2025
Reserved: Nov 4, 2019

Description

A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.

Scores

CVSS	Score	Vector	Source
3.1	10.0 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
Windows ServerMicrosoft	2019Affected 2019 (Core installation)Affected 2016Affected 2016 (Core installation)Affected 2008 for 32-bit Systems Service Pack 2Affected 2008 for 32-bit Systems Service Pack 2 (Core installation)Affected 2008 for x64-based Systems Service Pack 2Affected 2008 for x64-based Systems Service Pack 2 (Core installation)Affected 2008 R2 for x64-based Systems Service Pack 1Affected 2008 R2 for x64-based Systems Service Pack 1 (Core installation)Affected 2012Affected 2012 (Core installation)Affected 2012 R2Affected 2012 R2 (Core installation)Affected
Windows Server, version 1909 (Server Core installation)Microsoft	unspecifiedAffected
Windows Server, version 1903 (Server Core installation)Microsoft	unspecifiedAffected
Windows Server, version 2004 (Server Core installation)Microsoft	unspecifiedAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.